./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:00:04,464 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:00:04,466 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:00:04,489 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:00:04,489 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:00:04,490 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:00:04,491 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:00:04,493 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:00:04,495 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:00:04,495 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:00:04,496 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:00:04,497 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:00:04,498 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:00:04,498 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:00:04,500 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:00:04,501 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:00:04,501 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:00:04,502 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:00:04,504 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:00:04,506 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:00:04,507 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:00:04,508 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:00:04,509 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:00:04,510 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:00:04,512 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:00:04,513 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:00:04,513 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:00:04,514 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:00:04,514 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:00:04,515 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:00:04,515 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:00:04,516 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:00:04,517 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:00:04,517 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:00:04,518 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:00:04,518 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:00:04,519 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:00:04,519 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:00:04,519 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:00:04,520 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:00:04,521 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:00:04,521 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-06 23:00:04,539 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:00:04,539 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:00:04,539 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:00:04,539 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:00:04,540 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 23:00:04,540 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 23:00:04,540 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:00:04,540 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:00:04,541 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:00:04,541 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:00:04,541 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 23:00:04,541 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:00:04,541 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 23:00:04,541 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 23:00:04,541 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 23:00:04,541 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:00:04,541 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:00:04,541 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 23:00:04,542 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:00:04,542 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:00:04,542 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 23:00:04,542 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:00:04,542 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:00:04,542 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 23:00:04,542 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 23:00:04,542 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 23:00:04,543 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 23:00:04,543 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 23:00:04,543 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 23:00:04,543 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 23:00:04,543 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:00:04,543 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 [2021-12-06 23:00:04,730 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:00:04,744 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:00:04,746 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:00:04,747 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:00:04,748 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:00:04,749 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-06 23:00:04,800 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data/b5cd84f39/63ba1b50542b4a82aadd95f050925690/FLAG34de69296 [2021-12-06 23:00:05,356 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:00:05,356 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-06 23:00:05,379 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data/b5cd84f39/63ba1b50542b4a82aadd95f050925690/FLAG34de69296 [2021-12-06 23:00:05,824 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data/b5cd84f39/63ba1b50542b4a82aadd95f050925690 [2021-12-06 23:00:05,827 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:00:05,828 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:00:05,830 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:00:05,830 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:00:05,833 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:00:05,833 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:00:05" (1/1) ... [2021-12-06 23:00:05,834 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6195f34b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:05, skipping insertion in model container [2021-12-06 23:00:05,834 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:00:05" (1/1) ... [2021-12-06 23:00:05,840 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:00:05,908 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:00:06,190 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-06 23:00:06,190 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-06 23:00:06,355 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-06 23:00:06,804 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:00:06,815 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:00:06,866 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-06 23:00:06,867 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-06 23:00:06,873 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-06 23:00:06,992 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:00:07,023 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:00:07,024 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07 WrapperNode [2021-12-06 23:00:07,024 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:00:07,024 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:00:07,025 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:00:07,025 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:00:07,030 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,070 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,124 INFO L137 Inliner]: procedures = 170, calls = 1019, calls flagged for inlining = 80, calls inlined = 51, statements flattened = 1557 [2021-12-06 23:00:07,124 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:00:07,125 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:00:07,125 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:00:07,125 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:00:07,131 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,131 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,147 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,148 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,190 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,197 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,205 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,217 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:00:07,217 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:00:07,217 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:00:07,218 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:00:07,218 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (1/1) ... [2021-12-06 23:00:07,224 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:00:07,233 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:00:07,244 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 23:00:07,246 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 23:00:07,273 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_map_urb_for_dma [2021-12-06 23:00:07,273 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_map_urb_for_dma [2021-12-06 23:00:07,273 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2021-12-06 23:00:07,273 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2021-12-06 23:00:07,273 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2021-12-06 23:00:07,273 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2021-12-06 23:00:07,273 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 23:00:07,273 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 23:00:07,273 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-06 23:00:07,273 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2021-12-06 23:00:07,274 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2021-12-06 23:00:07,274 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 23:00:07,274 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 23:00:07,274 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2021-12-06 23:00:07,274 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2021-12-06 23:00:07,274 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_control [2021-12-06 23:00:07,274 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_control [2021-12-06 23:00:07,274 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_dequeue [2021-12-06 23:00:07,274 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_dequeue [2021-12-06 23:00:07,274 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 23:00:07,274 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 23:00:07,274 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2021-12-06 23:00:07,275 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2021-12-06 23:00:07,275 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_endpoint_disable [2021-12-06 23:00:07,275 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_endpoint_disable [2021-12-06 23:00:07,275 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-06 23:00:07,275 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 23:00:07,275 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 23:00:07,275 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 23:00:07,275 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 23:00:07,275 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-12-06 23:00:07,275 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 23:00:07,275 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 23:00:07,275 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_reset [2021-12-06 23:00:07,275 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_reset [2021-12-06 23:00:07,276 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_enqueue [2021-12-06 23:00:07,276 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_enqueue [2021-12-06 23:00:07,276 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 23:00:07,276 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 23:00:07,276 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 23:00:07,276 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_resume [2021-12-06 23:00:07,276 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_resume [2021-12-06 23:00:07,276 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:00:07,276 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_gpout_set_value [2021-12-06 23:00:07,276 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_gpout_set_value [2021-12-06 23:00:07,276 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 23:00:07,276 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 23:00:07,277 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-06 23:00:07,277 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-06 23:00:07,277 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2021-12-06 23:00:07,277 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2021-12-06 23:00:07,277 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2021-12-06 23:00:07,277 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2021-12-06 23:00:07,277 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 23:00:07,277 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-06 23:00:07,277 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-06 23:00:07,277 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 23:00:07,277 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 23:00:07,277 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_unmap_urb_for_dma [2021-12-06 23:00:07,278 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_unmap_urb_for_dma [2021-12-06 23:00:07,278 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-06 23:00:07,278 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-06 23:00:07,278 INFO L130 BoogieDeclarations]: Found specification of procedure to_spi_device [2021-12-06 23:00:07,278 INFO L138 BoogieDeclarations]: Found implementation of procedure to_spi_device [2021-12-06 23:00:07,278 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 23:00:07,278 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2021-12-06 23:00:07,278 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2021-12-06 23:00:07,278 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_suspend [2021-12-06 23:00:07,278 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_suspend [2021-12-06 23:00:07,278 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_get_frame_number [2021-12-06 23:00:07,278 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_get_frame_number [2021-12-06 23:00:07,279 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-06 23:00:07,279 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-06 23:00:07,279 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:00:07,279 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:00:07,279 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_status_data [2021-12-06 23:00:07,279 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_status_data [2021-12-06 23:00:07,279 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_max3421 [2021-12-06 23:00:07,279 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_max3421 [2021-12-06 23:00:07,279 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2021-12-06 23:00:07,279 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2021-12-06 23:00:07,548 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:00:07,549 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:00:07,873 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 23:00:08,334 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:00:08,346 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:00:08,346 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-06 23:00:08,349 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:00:08 BoogieIcfgContainer [2021-12-06 23:00:08,349 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:00:08,351 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 23:00:08,352 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 23:00:08,355 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 23:00:08,355 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 11:00:05" (1/3) ... [2021-12-06 23:00:08,356 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c7936b7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:00:08, skipping insertion in model container [2021-12-06 23:00:08,356 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:07" (2/3) ... [2021-12-06 23:00:08,356 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c7936b7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:00:08, skipping insertion in model container [2021-12-06 23:00:08,357 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:00:08" (3/3) ... [2021-12-06 23:00:08,358 INFO L111 eAbstractionObserver]: Analyzing ICFG 43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-06 23:00:08,363 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 23:00:08,364 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 23:00:08,417 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 23:00:08,422 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 23:00:08,422 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 23:00:08,448 INFO L276 IsEmpty]: Start isEmpty. Operand has 535 states, 395 states have (on average 1.379746835443038) internal successors, (545), 405 states have internal predecessors, (545), 105 states have call successors, (105), 34 states have call predecessors, (105), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2021-12-06 23:00:08,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-06 23:00:08,463 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:08,463 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:08,464 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:08,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:08,468 INFO L85 PathProgramCache]: Analyzing trace with hash -1403727082, now seen corresponding path program 1 times [2021-12-06 23:00:08,475 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:00:08,475 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [338037508] [2021-12-06 23:00:08,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:08,476 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:00:08,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:08,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:00:08,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:08,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:00:08,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:08,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:00:08,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:08,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-06 23:00:08,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:08,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-06 23:00:08,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:08,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-06 23:00:08,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:08,969 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 23:00:08,969 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:00:08,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [338037508] [2021-12-06 23:00:08,970 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [338037508] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:00:08,970 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:00:08,970 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:00:08,971 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [49772004] [2021-12-06 23:00:08,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:00:08,987 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:00:08,988 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:00:09,015 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:00:09,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:00:09,020 INFO L87 Difference]: Start difference. First operand has 535 states, 395 states have (on average 1.379746835443038) internal successors, (545), 405 states have internal predecessors, (545), 105 states have call successors, (105), 34 states have call predecessors, (105), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 23:00:10,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:00:10,471 INFO L93 Difference]: Finished difference Result 1566 states and 2222 transitions. [2021-12-06 23:00:10,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 23:00:10,473 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 58 [2021-12-06 23:00:10,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:00:10,489 INFO L225 Difference]: With dead ends: 1566 [2021-12-06 23:00:10,489 INFO L226 Difference]: Without dead ends: 1003 [2021-12-06 23:00:10,495 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 23:00:10,498 INFO L933 BasicCegarLoop]: 711 mSDtfsCounter, 1174 mSDsluCounter, 1543 mSDsCounter, 0 mSdLazyCounter, 908 mSolverCounterSat, 613 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1244 SdHoareTripleChecker+Valid, 2254 SdHoareTripleChecker+Invalid, 1521 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 613 IncrementalHoareTripleChecker+Valid, 908 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:00:10,498 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1244 Valid, 2254 Invalid, 1521 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [613 Valid, 908 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-12-06 23:00:10,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1003 states. [2021-12-06 23:00:10,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1003 to 907. [2021-12-06 23:00:10,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 907 states, 675 states have (on average 1.3644444444444443) internal successors, (921), 678 states have internal predecessors, (921), 171 states have call successors, (171), 61 states have call predecessors, (171), 60 states have return successors, (170), 170 states have call predecessors, (170), 170 states have call successors, (170) [2021-12-06 23:00:10,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 907 states to 907 states and 1262 transitions. [2021-12-06 23:00:10,596 INFO L78 Accepts]: Start accepts. Automaton has 907 states and 1262 transitions. Word has length 58 [2021-12-06 23:00:10,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:00:10,597 INFO L470 AbstractCegarLoop]: Abstraction has 907 states and 1262 transitions. [2021-12-06 23:00:10,597 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 23:00:10,597 INFO L276 IsEmpty]: Start isEmpty. Operand 907 states and 1262 transitions. [2021-12-06 23:00:10,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-06 23:00:10,603 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:10,603 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:10,603 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 23:00:10,603 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:10,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:10,604 INFO L85 PathProgramCache]: Analyzing trace with hash -1087134040, now seen corresponding path program 1 times [2021-12-06 23:00:10,604 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:00:10,604 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [78175358] [2021-12-06 23:00:10,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:10,605 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:00:10,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:10,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:00:10,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:10,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:00:10,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:10,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:00:10,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:10,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 23:00:10,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:10,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-06 23:00:10,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:10,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-06 23:00:10,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:10,725 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 23:00:10,725 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:00:10,725 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [78175358] [2021-12-06 23:00:10,726 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [78175358] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:00:10,726 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:00:10,726 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:00:10,726 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442263784] [2021-12-06 23:00:10,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:00:10,727 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:00:10,727 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:00:10,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:00:10,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:00:10,728 INFO L87 Difference]: Start difference. First operand 907 states and 1262 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 23:00:11,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:00:11,530 INFO L93 Difference]: Finished difference Result 2159 states and 2998 transitions. [2021-12-06 23:00:11,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 23:00:11,531 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 69 [2021-12-06 23:00:11,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:00:11,543 INFO L225 Difference]: With dead ends: 2159 [2021-12-06 23:00:11,543 INFO L226 Difference]: Without dead ends: 1279 [2021-12-06 23:00:11,547 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:00:11,549 INFO L933 BasicCegarLoop]: 822 mSDtfsCounter, 630 mSDsluCounter, 1360 mSDsCounter, 0 mSdLazyCounter, 649 mSolverCounterSat, 330 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 679 SdHoareTripleChecker+Valid, 2182 SdHoareTripleChecker+Invalid, 979 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 330 IncrementalHoareTripleChecker+Valid, 649 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-06 23:00:11,550 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [679 Valid, 2182 Invalid, 979 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [330 Valid, 649 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-06 23:00:11,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1279 states. [2021-12-06 23:00:11,620 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1279 to 1196. [2021-12-06 23:00:11,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1196 states, 903 states have (on average 1.3565891472868217) internal successors, (1225), 908 states have internal predecessors, (1225), 210 states have call successors, (210), 83 states have call predecessors, (210), 82 states have return successors, (209), 208 states have call predecessors, (209), 209 states have call successors, (209) [2021-12-06 23:00:11,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1196 states to 1196 states and 1644 transitions. [2021-12-06 23:00:11,629 INFO L78 Accepts]: Start accepts. Automaton has 1196 states and 1644 transitions. Word has length 69 [2021-12-06 23:00:11,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:00:11,629 INFO L470 AbstractCegarLoop]: Abstraction has 1196 states and 1644 transitions. [2021-12-06 23:00:11,629 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 23:00:11,629 INFO L276 IsEmpty]: Start isEmpty. Operand 1196 states and 1644 transitions. [2021-12-06 23:00:11,634 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-12-06 23:00:11,634 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:11,635 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:11,635 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 23:00:11,635 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:11,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:11,635 INFO L85 PathProgramCache]: Analyzing trace with hash 1198872686, now seen corresponding path program 1 times [2021-12-06 23:00:11,635 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:00:11,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2069619529] [2021-12-06 23:00:11,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:11,636 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:00:11,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:00:11,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:00:11,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:00:11,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-06 23:00:11,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-06 23:00:11,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-06 23:00:11,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-06 23:00:11,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-06 23:00:11,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:00:11,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:11,831 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2021-12-06 23:00:11,831 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:00:11,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2069619529] [2021-12-06 23:00:11,831 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2069619529] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:00:11,831 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:00:11,831 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:00:11,831 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2052962856] [2021-12-06 23:00:11,831 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:00:11,832 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:00:11,832 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:00:11,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:00:11,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:00:11,833 INFO L87 Difference]: Start difference. First operand 1196 states and 1644 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:00:12,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:00:12,757 INFO L93 Difference]: Finished difference Result 1337 states and 1828 transitions. [2021-12-06 23:00:12,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 23:00:12,758 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 89 [2021-12-06 23:00:12,758 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:00:12,765 INFO L225 Difference]: With dead ends: 1337 [2021-12-06 23:00:12,765 INFO L226 Difference]: Without dead ends: 1334 [2021-12-06 23:00:12,773 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 23:00:12,774 INFO L933 BasicCegarLoop]: 649 mSDtfsCounter, 925 mSDsluCounter, 750 mSDsCounter, 0 mSdLazyCounter, 460 mSolverCounterSat, 468 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 969 SdHoareTripleChecker+Valid, 1399 SdHoareTripleChecker+Invalid, 928 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 468 IncrementalHoareTripleChecker+Valid, 460 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-06 23:00:12,774 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [969 Valid, 1399 Invalid, 928 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [468 Valid, 460 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-06 23:00:12,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1334 states. [2021-12-06 23:00:12,813 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1334 to 1224. [2021-12-06 23:00:12,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1224 states, 922 states have (on average 1.3481561822125814) internal successors, (1243), 927 states have internal predecessors, (1243), 210 states have call successors, (210), 92 states have call predecessors, (210), 91 states have return successors, (209), 208 states have call predecessors, (209), 209 states have call successors, (209) [2021-12-06 23:00:12,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1224 states to 1224 states and 1662 transitions. [2021-12-06 23:00:12,821 INFO L78 Accepts]: Start accepts. Automaton has 1224 states and 1662 transitions. Word has length 89 [2021-12-06 23:00:12,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:00:12,821 INFO L470 AbstractCegarLoop]: Abstraction has 1224 states and 1662 transitions. [2021-12-06 23:00:12,822 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:00:12,822 INFO L276 IsEmpty]: Start isEmpty. Operand 1224 states and 1662 transitions. [2021-12-06 23:00:12,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-06 23:00:12,825 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:12,825 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:12,826 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 23:00:12,826 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:12,826 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:12,826 INFO L85 PathProgramCache]: Analyzing trace with hash -552282000, now seen corresponding path program 1 times [2021-12-06 23:00:12,826 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:00:12,826 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184934155] [2021-12-06 23:00:12,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:12,827 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:00:12,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:00:12,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:00:12,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:00:12,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-06 23:00:12,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-06 23:00:12,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-06 23:00:12,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-06 23:00:12,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:00:12,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-06 23:00:12,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:12,950 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2021-12-06 23:00:12,950 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:00:12,950 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184934155] [2021-12-06 23:00:12,950 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184934155] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:00:12,950 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:00:12,951 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:00:12,951 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2009955478] [2021-12-06 23:00:12,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:00:12,951 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:00:12,951 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:00:12,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:00:12,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:00:12,952 INFO L87 Difference]: Start difference. First operand 1224 states and 1662 transitions. Second operand has 5 states, 5 states have (on average 12.2) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:00:13,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:00:13,586 INFO L93 Difference]: Finished difference Result 2500 states and 3418 transitions. [2021-12-06 23:00:13,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 23:00:13,587 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.2) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 99 [2021-12-06 23:00:13,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:00:13,594 INFO L225 Difference]: With dead ends: 2500 [2021-12-06 23:00:13,594 INFO L226 Difference]: Without dead ends: 1306 [2021-12-06 23:00:13,597 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:00:13,598 INFO L933 BasicCegarLoop]: 669 mSDtfsCounter, 286 mSDsluCounter, 1251 mSDsCounter, 0 mSdLazyCounter, 468 mSolverCounterSat, 251 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 1920 SdHoareTripleChecker+Invalid, 719 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 251 IncrementalHoareTripleChecker+Valid, 468 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-06 23:00:13,599 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [303 Valid, 1920 Invalid, 719 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [251 Valid, 468 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-06 23:00:13,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1306 states. [2021-12-06 23:00:13,639 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1306 to 1226. [2021-12-06 23:00:13,641 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1226 states, 924 states have (on average 1.3452380952380953) internal successors, (1243), 929 states have internal predecessors, (1243), 210 states have call successors, (210), 92 states have call predecessors, (210), 91 states have return successors, (209), 208 states have call predecessors, (209), 209 states have call successors, (209) [2021-12-06 23:00:13,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1226 states to 1226 states and 1662 transitions. [2021-12-06 23:00:13,647 INFO L78 Accepts]: Start accepts. Automaton has 1226 states and 1662 transitions. Word has length 99 [2021-12-06 23:00:13,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:00:13,648 INFO L470 AbstractCegarLoop]: Abstraction has 1226 states and 1662 transitions. [2021-12-06 23:00:13,648 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.2) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:00:13,648 INFO L276 IsEmpty]: Start isEmpty. Operand 1226 states and 1662 transitions. [2021-12-06 23:00:13,651 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-06 23:00:13,652 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:13,652 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:13,652 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 23:00:13,652 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:13,652 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:13,652 INFO L85 PathProgramCache]: Analyzing trace with hash -1573350354, now seen corresponding path program 1 times [2021-12-06 23:00:13,652 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:00:13,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336246526] [2021-12-06 23:00:13,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:13,653 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:00:13,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:00:13,735 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:00:13,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:00:13,867 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:00:13,867 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 23:00:13,868 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 23:00:13,869 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 23:00:13,872 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1] [2021-12-06 23:00:13,874 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 23:00:13,997 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 11:00:13 BoogieIcfgContainer [2021-12-06 23:00:13,997 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 23:00:13,998 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 23:00:13,998 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 23:00:13,998 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 23:00:13,999 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:00:08" (3/4) ... [2021-12-06 23:00:14,001 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 23:00:14,001 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 23:00:14,001 INFO L158 Benchmark]: Toolchain (without parser) took 8173.05ms. Allocated memory was 102.8MB in the beginning and 184.5MB in the end (delta: 81.8MB). Free memory was 61.5MB in the beginning and 85.5MB in the end (delta: -24.0MB). Peak memory consumption was 57.1MB. Max. memory is 16.1GB. [2021-12-06 23:00:14,002 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 71.3MB. Free memory was 32.3MB in the beginning and 32.2MB in the end (delta: 76.9kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:00:14,002 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1194.27ms. Allocated memory was 102.8MB in the beginning and 123.7MB in the end (delta: 21.0MB). Free memory was 61.2MB in the beginning and 56.0MB in the end (delta: 5.2MB). Peak memory consumption was 40.7MB. Max. memory is 16.1GB. [2021-12-06 23:00:14,002 INFO L158 Benchmark]: Boogie Procedure Inliner took 100.03ms. Allocated memory is still 123.7MB. Free memory was 55.8MB in the beginning and 45.6MB in the end (delta: 10.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-06 23:00:14,003 INFO L158 Benchmark]: Boogie Preprocessor took 91.91ms. Allocated memory is still 123.7MB. Free memory was 45.6MB in the beginning and 68.4MB in the end (delta: -22.8MB). Peak memory consumption was 7.7MB. Max. memory is 16.1GB. [2021-12-06 23:00:14,003 INFO L158 Benchmark]: RCFGBuilder took 1132.13ms. Allocated memory was 123.7MB in the beginning and 153.1MB in the end (delta: 29.4MB). Free memory was 68.4MB in the beginning and 95.5MB in the end (delta: -27.1MB). Peak memory consumption was 38.5MB. Max. memory is 16.1GB. [2021-12-06 23:00:14,004 INFO L158 Benchmark]: TraceAbstraction took 5646.04ms. Allocated memory was 153.1MB in the beginning and 184.5MB in the end (delta: 31.5MB). Free memory was 94.6MB in the beginning and 85.5MB in the end (delta: 9.1MB). Peak memory consumption was 86.1MB. Max. memory is 16.1GB. [2021-12-06 23:00:14,004 INFO L158 Benchmark]: Witness Printer took 2.98ms. Allocated memory is still 184.5MB. Free memory is still 85.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:00:14,006 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 71.3MB. Free memory was 32.3MB in the beginning and 32.2MB in the end (delta: 76.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1194.27ms. Allocated memory was 102.8MB in the beginning and 123.7MB in the end (delta: 21.0MB). Free memory was 61.2MB in the beginning and 56.0MB in the end (delta: 5.2MB). Peak memory consumption was 40.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 100.03ms. Allocated memory is still 123.7MB. Free memory was 55.8MB in the beginning and 45.6MB in the end (delta: 10.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Preprocessor took 91.91ms. Allocated memory is still 123.7MB. Free memory was 45.6MB in the beginning and 68.4MB in the end (delta: -22.8MB). Peak memory consumption was 7.7MB. Max. memory is 16.1GB. * RCFGBuilder took 1132.13ms. Allocated memory was 123.7MB in the beginning and 153.1MB in the end (delta: 29.4MB). Free memory was 68.4MB in the beginning and 95.5MB in the end (delta: -27.1MB). Peak memory consumption was 38.5MB. Max. memory is 16.1GB. * TraceAbstraction took 5646.04ms. Allocated memory was 153.1MB in the beginning and 184.5MB in the end (delta: 31.5MB). Free memory was 94.6MB in the beginning and 85.5MB in the end (delta: 9.1MB). Peak memory consumption was 86.1MB. Max. memory is 16.1GB. * Witness Printer took 2.98ms. Allocated memory is still 184.5MB. Free memory is still 85.5MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 3987]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 5883, overapproximation of bitwiseAnd at line 6549. Possible FailurePath: [L4010] int ldv_irq_1_2 = 0; [L4011] int LDV_IN_INTERRUPT = 1; [L4012] int ldv_irq_1_3 = 0; [L4013] void *ldv_irq_data_1_1 ; [L4014] int ldv_irq_1_1 = 0; [L4015] int ldv_irq_1_0 = 0; [L4016] struct urb *max3421_hcd_desc_group0 ; [L4017] int ldv_irq_line_1_3 ; [L4018] void *ldv_irq_data_1_0 ; [L4019] int ldv_state_variable_0 ; [L4020] struct usb_hcd *max3421_hcd_desc_group1 ; [L4021] int ldv_state_variable_3 ; [L4022] int ldv_irq_line_1_0 ; [L4023] int ldv_state_variable_2 ; [L4024] void *ldv_irq_data_1_3 ; [L4025] struct spi_device *max3421_driver_group0 ; [L4026] int ref_cnt ; [L4027] int ldv_irq_line_1_1 ; [L4028] void *ldv_irq_data_1_2 ; [L4029] int ldv_state_variable_1 ; [L4030] int ldv_irq_line_1_2 ; [L4208] static struct max3421_hcd *max3421_hcd_list ; [L4209-L4213] static int const hrsl_to_error[16U] = { 0, -22, -22, -22, -11, -32, -84, -71, -121, -71, -71, -84, -5, -5, -62, -75}; [L5882-L5888] static struct hc_driver max3421_hcd_desc = {"max3421", "MAX3421 USB Host-Controller Driver", 192UL, 0, 16, & max3421_reset, & max3421_start, 0, 0, & max3421_stop, 0, & max3421_get_frame_number, & max3421_urb_enqueue, & max3421_urb_dequeue, & max3421_map_urb_for_dma, & max3421_unmap_urb_for_dma, & max3421_endpoint_disable, 0, & max3421_hub_status_data, & max3421_hub_control, & max3421_bus_suspend, & max3421_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L6027-L6029] static struct spi_driver max3421_driver = {0, & max3421_probe, & max3421_remove, 0, 0, 0, {"max3421-hcd", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}; [L6045] int ldv_retval_0 ; [L6046] int ldv_retval_1 ; [L6049] int ldv_retval_2 ; [L6545] int ldv_spin = 0; VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6194] char *ldvarg7 ; [L6195] void *tmp ; [L6196] u16 ldvarg3 ; [L6197] u16 tmp___0 ; [L6198] u16 ldvarg0 ; [L6199] u16 tmp___1 ; [L6200] gfp_t ldvarg5 ; [L6201] gfp_t ldvarg6 ; [L6202] struct usb_host_endpoint *ldvarg8 ; [L6203] void *tmp___2 ; [L6204] u16 ldvarg1 ; [L6205] u16 tmp___3 ; [L6206] char *ldvarg4 ; [L6207] void *tmp___4 ; [L6208] int ldvarg9 ; [L6209] int tmp___5 ; [L6210] u16 ldvarg2 ; [L6211] u16 tmp___6 ; [L6212] int tmp___7 ; [L6213] int tmp___8 ; [L6214] int tmp___9 ; [L6215] int tmp___10 ; VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=1] [L6217] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] tmp = ldv_zalloc(1UL) [L6218] ldvarg7 = (char *)tmp [L6219] tmp___0 = __VERIFIER_nondet_u16() [L6220] ldvarg3 = tmp___0 [L6221] tmp___1 = __VERIFIER_nondet_u16() [L6222] ldvarg0 = tmp___1 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg3=6, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5] [L6223] CALL, EXPR ldv_zalloc(72UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=72, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=72, tmp___0=1] [L6223] RET, EXPR ldv_zalloc(72UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(72UL)={0:0}, ldvarg0=5, ldvarg3=6, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5] [L6223] tmp___2 = ldv_zalloc(72UL) [L6224] ldvarg8 = (struct usb_host_endpoint *)tmp___2 [L6225] tmp___3 = __VERIFIER_nondet_u16() [L6226] ldvarg1 = tmp___3 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg1=1, ldvarg3=6, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1] [L6227] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=1] [L6227] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, ldvarg0=5, ldvarg1=1, ldvarg3=6, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1] [L6227] tmp___4 = ldv_zalloc(1UL) [L6228] ldvarg4 = (char *)tmp___4 [L6229] tmp___5 = __VERIFIER_nondet_int() [L6230] ldvarg9 = tmp___5 [L6231] tmp___6 = __VERIFIER_nondet_u16() [L6232] ldvarg2 = tmp___6 [L6233] FCALL ldv_initialize() [L6234] ldvarg5 = (gfp_t)__VERIFIER_nondet_int() [L6235] ldvarg6 = (gfp_t)__VERIFIER_nondet_int() [L6236] ldv_state_variable_1 = 1 [L6237] ref_cnt = 0 [L6238] ldv_state_variable_0 = 1 [L6239] ldv_state_variable_3 = 0 [L6240] ldv_state_variable_2 = 0 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=1] [L6251] COND TRUE ldv_state_variable_0 != 0 [L6252] tmp___8 = __VERIFIER_nondet_int() [L6254] case 0: [L6262] case 1: VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=1, tmp___8=1] [L6263] COND TRUE ldv_state_variable_0 == 1 [L6264] CALL, EXPR max3421_driver_init() [L6032] int tmp ; [L6034] CALL, EXPR spi_register_driver(& max3421_driver) [L6691] return __VERIFIER_nondet_int(); [L6034] RET, EXPR spi_register_driver(& max3421_driver) [L6034] tmp = spi_register_driver(& max3421_driver) [L6035] return (tmp); VAL [\result=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp=0] [L6264] RET, EXPR max3421_driver_init() [L6264] ldv_retval_0 = max3421_driver_init() [L6265] COND TRUE ldv_retval_0 == 0 [L6266] ldv_state_variable_0 = 3 [L6267] ldv_state_variable_2 = 1 [L6268] CALL ldv_initialize_spi_driver_2() [L6159] void *tmp ; VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] CALL, EXPR ldv_zalloc(1496UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1496, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1496, tmp___0=1] [L6161] RET, EXPR ldv_zalloc(1496UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_zalloc(1496UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] tmp = ldv_zalloc(1496UL) [L6162] max3421_driver_group0 = (struct spi_device *)tmp VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6268] RET ldv_initialize_spi_driver_2() [L6269] ldv_state_variable_3 = 1 [L6270] CALL ldv_initialize_hc_driver_3() [L6122] void *tmp ; [L6123] void *tmp___0 ; VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] CALL, EXPR ldv_zalloc(192UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=192, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=192, tmp___0=1] [L6125] RET, EXPR ldv_zalloc(192UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(192UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] tmp = ldv_zalloc(192UL) [L6126] max3421_hcd_desc_group0 = (struct urb *)tmp VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] CALL, EXPR ldv_zalloc(968UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=968, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=968, tmp___0=1] [L6127] RET, EXPR ldv_zalloc(968UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(968UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] tmp___0 = ldv_zalloc(968UL) [L6128] max3421_hcd_desc_group1 = (struct usb_hcd *)tmp___0 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}] [L6270] RET ldv_initialize_hc_driver_3() [L6273] COND FALSE !(ldv_retval_0 != 0) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=1, tmp___8=1] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: [L6288] case 2: VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=2, tmp___8=1] [L6289] COND TRUE ldv_state_variable_3 != 0 [L6290] tmp___9 = __VERIFIER_nondet_int() [L6292] case 0: [L6303] case 1: [L6315] case 2: [L6327] case 3: [L6339] case 4: [L6351] case 5: [L6363] case 6: [L6375] case 7: [L6387] case 8: [L6395] case 9: [L6407] case 10: VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=2, tmp___8=1, tmp___9=10] [L6408] COND TRUE ldv_state_variable_3 == 1 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=2, tmp___8=1, tmp___9=10] [L6409] CALL max3421_urb_enqueue(max3421_hcd_desc_group1, max3421_hcd_desc_group0, ldvarg5) VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5535] struct spi_device *spi ; [L5536] struct spi_device *tmp ; [L5537] struct max3421_hcd *max3421_hcd ; [L5538] struct max3421_hcd *tmp___0 ; [L5539] struct max3421_ep *max3421_ep ; [L5540] unsigned long flags ; [L5541] int retval ; [L5542] void *tmp___1 ; [L5544] EXPR hcd->self.controller VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hcd->self.controller={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, urb={0:0}, urb={0:0}] [L5544] CALL, EXPR to_spi_device(hcd->self.controller) VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, dev={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4062] struct device const *__mptr ; [L4063] struct spi_device *tmp ; VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, dev={-89:90}, dev={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4065] COND TRUE (unsigned long )dev != (unsigned long )((struct device *)0) [L4066] __mptr = (struct device const *)dev [L4067] tmp = (struct spi_device *)__mptr VAL [\old(ldv_spin)=0, __mptr={-89:90}, __this_module={97710505986:97710505987}, dev={-89:90}, dev={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={-89:90}] [L4071] return (tmp); VAL [\old(ldv_spin)=0, \result={-89:90}, __mptr={-89:90}, __this_module={97710505986:97710505987}, dev={-89:90}, dev={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={-89:90}] [L5544] RET, EXPR to_spi_device(hcd->self.controller) VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hcd->self.controller={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, to_spi_device(hcd->self.controller)={-89:90}, urb={0:0}, urb={0:0}] [L5544] tmp = to_spi_device(hcd->self.controller) [L5545] spi = tmp VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, urb={0:0}, urb={0:0}] [L5546] CALL, EXPR hcd_to_max3421(hcd) VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4223] return ((struct max3421_hcd *)(& hcd->hcd_priv)); VAL [\old(ldv_spin)=0, \result={0:899}, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5546] RET, EXPR hcd_to_max3421(hcd) VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hcd_to_max3421(hcd)={0:899}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, urb={0:0}, urb={0:0}] [L5546] tmp___0 = hcd_to_max3421(hcd) [L5547] max3421_hcd = tmp___0 [L5548] urb->pipe [L5549] case 1U: VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=97710505984] [L5550] case 0U: VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=97710505984] [L5557] default: VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=97710505984] [L5561] CALL ldv_spin_lock() VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6582] ldv_spin = 1 VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5561] RET ldv_spin_lock() VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=97710505984] [L5562] EXPR urb->ep [L5562] EXPR (urb->ep)->hcpriv [L5562] max3421_ep = (struct max3421_ep *)(urb->ep)->hcpriv [L5563] COND TRUE (unsigned long )max3421_ep == (unsigned long )((struct max3421_ep *)0) [L5564] CALL kzalloc(40UL, mem_flags) [L6513] CALL ldv_check_alloc_flags(flags) VAL [\old(flags)=4294967293, \old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6549] COND FALSE !(ldv_spin == 0 || ! (flags & 16U)) VAL [\old(flags)=4294967293, \old(ldv_spin)=0, __this_module={97710505986:97710505987}, flags=4294967293, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6551] CALL ldv_error() VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3987] reach_error() VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 35 procedures, 536 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.5s, OverallIterations: 5, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3195 SdHoareTripleChecker+Valid, 3.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3015 mSDsluCounter, 7755 SdHoareTripleChecker+Invalid, 2.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4904 mSDsCounter, 1662 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2485 IncrementalHoareTripleChecker+Invalid, 4147 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1662 mSolverCounterUnsat, 2851 mSDtfsCounter, 2485 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 99 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1226occurred in iteration=4, InterpolantAutomatonStates: 35, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 4 MinimizatonAttempts, 369 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.6s InterpolantComputationTime, 414 NumberOfCodeBlocks, 414 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 311 ConstructedInterpolants, 0 QuantifiedInterpolants, 633 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 150/150 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 23:00:14,038 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:00:15,601 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:00:15,603 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:00:15,631 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:00:15,631 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:00:15,633 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:00:15,635 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:00:15,637 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:00:15,639 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:00:15,641 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:00:15,642 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:00:15,643 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:00:15,644 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:00:15,645 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:00:15,648 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:00:15,650 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:00:15,651 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:00:15,652 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:00:15,658 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:00:15,661 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:00:15,663 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:00:15,664 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:00:15,666 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:00:15,667 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:00:15,670 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:00:15,671 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:00:15,671 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:00:15,672 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:00:15,673 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:00:15,674 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:00:15,674 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:00:15,674 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:00:15,675 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:00:15,676 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:00:15,677 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:00:15,677 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:00:15,678 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:00:15,678 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:00:15,679 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:00:15,680 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:00:15,680 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:00:15,681 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-06 23:00:15,706 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:00:15,706 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:00:15,706 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:00:15,706 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:00:15,707 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 23:00:15,707 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 23:00:15,708 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:00:15,708 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:00:15,708 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:00:15,709 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:00:15,709 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:00:15,709 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 23:00:15,709 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 23:00:15,710 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 23:00:15,710 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-06 23:00:15,710 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-06 23:00:15,710 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-06 23:00:15,710 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:00:15,711 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:00:15,711 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 23:00:15,711 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:00:15,711 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:00:15,711 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 23:00:15,712 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:00:15,712 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:00:15,712 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 23:00:15,712 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 23:00:15,712 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-06 23:00:15,713 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-06 23:00:15,713 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 23:00:15,713 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 23:00:15,713 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 23:00:15,713 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:00:15,714 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-06 23:00:15,714 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 [2021-12-06 23:00:15,950 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:00:15,965 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:00:15,967 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:00:15,968 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:00:15,968 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:00:15,969 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-06 23:00:16,011 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data/fbfad1972/45a12f4a7bc84a5ea223b8f8c51d95d7/FLAG6383d22cf [2021-12-06 23:00:16,577 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:00:16,578 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-06 23:00:16,601 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data/fbfad1972/45a12f4a7bc84a5ea223b8f8c51d95d7/FLAG6383d22cf [2021-12-06 23:00:17,039 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/data/fbfad1972/45a12f4a7bc84a5ea223b8f8c51d95d7 [2021-12-06 23:00:17,041 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:00:17,042 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:00:17,043 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:00:17,043 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:00:17,046 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:00:17,046 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:00:17" (1/1) ... [2021-12-06 23:00:17,047 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6927bf89 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:17, skipping insertion in model container [2021-12-06 23:00:17,047 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:00:17" (1/1) ... [2021-12-06 23:00:17,052 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:00:17,126 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:00:17,415 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-06 23:00:17,416 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-06 23:00:17,570 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-06 23:00:18,003 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:00:18,021 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-06 23:00:18,061 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:00:18,113 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-06 23:00:18,113 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-06 23:00:18,124 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-06 23:00:18,203 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:00:18,209 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:00:18,282 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-06 23:00:18,282 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-06 23:00:18,297 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-06 23:00:18,401 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:00:18,455 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:00:18,458 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18 WrapperNode [2021-12-06 23:00:18,459 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:00:18,460 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:00:18,460 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:00:18,460 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:00:18,467 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,507 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,553 INFO L137 Inliner]: procedures = 178, calls = 1019, calls flagged for inlining = 80, calls inlined = 51, statements flattened = 1492 [2021-12-06 23:00:18,553 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:00:18,554 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:00:18,554 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:00:18,554 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:00:18,560 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,560 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,567 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,567 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,616 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,626 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,636 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,644 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:00:18,645 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:00:18,645 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:00:18,645 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:00:18,646 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (1/1) ... [2021-12-06 23:00:18,651 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:00:18,660 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:00:18,670 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 23:00:18,673 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 23:00:18,702 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-06 23:00:18,702 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_map_urb_for_dma [2021-12-06 23:00:18,702 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_map_urb_for_dma [2021-12-06 23:00:18,702 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2021-12-06 23:00:18,702 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2021-12-06 23:00:18,703 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-06 23:00:18,703 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-06 23:00:18,703 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-06 23:00:18,703 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2021-12-06 23:00:18,703 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2021-12-06 23:00:18,703 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 23:00:18,703 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 23:00:18,703 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2021-12-06 23:00:18,703 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2021-12-06 23:00:18,703 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 23:00:18,703 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 23:00:18,703 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2021-12-06 23:00:18,704 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2021-12-06 23:00:18,704 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_control [2021-12-06 23:00:18,704 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_control [2021-12-06 23:00:18,704 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_dequeue [2021-12-06 23:00:18,704 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_dequeue [2021-12-06 23:00:18,704 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 23:00:18,704 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 23:00:18,704 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2021-12-06 23:00:18,704 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2021-12-06 23:00:18,704 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_endpoint_disable [2021-12-06 23:00:18,705 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_endpoint_disable [2021-12-06 23:00:18,705 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 23:00:18,705 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 23:00:18,705 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 23:00:18,705 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 23:00:18,705 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-12-06 23:00:18,705 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 23:00:18,705 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 23:00:18,705 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_reset [2021-12-06 23:00:18,705 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_reset [2021-12-06 23:00:18,706 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_enqueue [2021-12-06 23:00:18,706 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_enqueue [2021-12-06 23:00:18,706 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 23:00:18,706 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 23:00:18,706 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 23:00:18,706 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_resume [2021-12-06 23:00:18,706 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_resume [2021-12-06 23:00:18,706 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:00:18,706 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_gpout_set_value [2021-12-06 23:00:18,706 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_gpout_set_value [2021-12-06 23:00:18,707 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 23:00:18,707 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 23:00:18,707 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-06 23:00:18,707 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-06 23:00:18,707 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2021-12-06 23:00:18,707 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2021-12-06 23:00:18,707 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2021-12-06 23:00:18,707 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2021-12-06 23:00:18,707 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 23:00:18,707 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-06 23:00:18,707 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-06 23:00:18,708 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-06 23:00:18,708 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-06 23:00:18,708 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 23:00:18,708 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-06 23:00:18,708 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 23:00:18,708 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_unmap_urb_for_dma [2021-12-06 23:00:18,708 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_unmap_urb_for_dma [2021-12-06 23:00:18,708 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-06 23:00:18,708 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-06 23:00:18,708 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-06 23:00:18,709 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-06 23:00:18,709 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-06 23:00:18,709 INFO L130 BoogieDeclarations]: Found specification of procedure to_spi_device [2021-12-06 23:00:18,709 INFO L138 BoogieDeclarations]: Found implementation of procedure to_spi_device [2021-12-06 23:00:18,709 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2021-12-06 23:00:18,709 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2021-12-06 23:00:18,709 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_suspend [2021-12-06 23:00:18,709 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_suspend [2021-12-06 23:00:18,709 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_get_frame_number [2021-12-06 23:00:18,709 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_get_frame_number [2021-12-06 23:00:18,709 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-06 23:00:18,710 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-06 23:00:18,710 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:00:18,710 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:00:18,710 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_status_data [2021-12-06 23:00:18,710 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_status_data [2021-12-06 23:00:18,710 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_max3421 [2021-12-06 23:00:18,710 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_max3421 [2021-12-06 23:00:18,710 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2021-12-06 23:00:18,710 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2021-12-06 23:00:18,960 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:00:18,962 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:00:19,149 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 23:00:25,147 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:00:25,163 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:00:25,164 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-06 23:00:25,167 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:00:25 BoogieIcfgContainer [2021-12-06 23:00:25,167 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:00:25,169 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 23:00:25,169 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 23:00:25,172 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 23:00:25,172 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 11:00:17" (1/3) ... [2021-12-06 23:00:25,173 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@784899a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:00:25, skipping insertion in model container [2021-12-06 23:00:25,173 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:00:18" (2/3) ... [2021-12-06 23:00:25,173 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@784899a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:00:25, skipping insertion in model container [2021-12-06 23:00:25,173 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:00:25" (3/3) ... [2021-12-06 23:00:25,175 INFO L111 eAbstractionObserver]: Analyzing ICFG 43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-06 23:00:25,180 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 23:00:25,180 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 23:00:25,233 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 23:00:25,239 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 23:00:25,239 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 23:00:25,268 INFO L276 IsEmpty]: Start isEmpty. Operand has 535 states, 395 states have (on average 1.379746835443038) internal successors, (545), 405 states have internal predecessors, (545), 105 states have call successors, (105), 34 states have call predecessors, (105), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2021-12-06 23:00:25,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-06 23:00:25,283 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:25,284 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:25,284 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:25,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:25,288 INFO L85 PathProgramCache]: Analyzing trace with hash -1460430108, now seen corresponding path program 1 times [2021-12-06 23:00:25,299 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:00:25,300 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1969707561] [2021-12-06 23:00:25,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:25,300 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:00:25,301 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:00:25,301 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:00:25,302 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-06 23:00:25,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:25,675 INFO L263 TraceCheckSpWp]: Trace formula consists of 650 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:00:25,681 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:00:25,806 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 23:00:25,806 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:00:25,807 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:00:25,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1969707561] [2021-12-06 23:00:25,808 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1969707561] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:00:25,808 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:00:25,808 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:00:25,810 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1205683751] [2021-12-06 23:00:25,810 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:00:25,814 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:00:25,815 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:00:25,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:00:25,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:00:25,841 INFO L87 Difference]: Start difference. First operand has 535 states, 395 states have (on average 1.379746835443038) internal successors, (545), 405 states have internal predecessors, (545), 105 states have call successors, (105), 34 states have call predecessors, (105), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 23:00:26,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:00:26,025 INFO L93 Difference]: Finished difference Result 1473 states and 2085 transitions. [2021-12-06 23:00:26,026 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:00:26,027 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 58 [2021-12-06 23:00:26,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:00:26,051 INFO L225 Difference]: With dead ends: 1473 [2021-12-06 23:00:26,051 INFO L226 Difference]: Without dead ends: 910 [2021-12-06 23:00:26,057 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 57 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:00:26,060 INFO L933 BasicCegarLoop]: 816 mSDtfsCounter, 569 mSDsluCounter, 724 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 569 SdHoareTripleChecker+Valid, 1540 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:00:26,061 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [569 Valid, 1540 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:00:26,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 910 states. [2021-12-06 23:00:26,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 910 to 907. [2021-12-06 23:00:26,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 907 states, 675 states have (on average 1.3644444444444443) internal successors, (921), 678 states have internal predecessors, (921), 171 states have call successors, (171), 61 states have call predecessors, (171), 60 states have return successors, (170), 170 states have call predecessors, (170), 170 states have call successors, (170) [2021-12-06 23:00:26,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 907 states to 907 states and 1262 transitions. [2021-12-06 23:00:26,169 INFO L78 Accepts]: Start accepts. Automaton has 907 states and 1262 transitions. Word has length 58 [2021-12-06 23:00:26,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:00:26,169 INFO L470 AbstractCegarLoop]: Abstraction has 907 states and 1262 transitions. [2021-12-06 23:00:26,170 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 23:00:26,170 INFO L276 IsEmpty]: Start isEmpty. Operand 907 states and 1262 transitions. [2021-12-06 23:00:26,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-12-06 23:00:26,177 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:26,177 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:26,191 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-06 23:00:26,378 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:00:26,379 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:26,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:26,382 INFO L85 PathProgramCache]: Analyzing trace with hash 773574401, now seen corresponding path program 1 times [2021-12-06 23:00:26,387 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:00:26,388 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [348162170] [2021-12-06 23:00:26,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:26,389 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:00:26,390 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:00:26,393 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:00:26,398 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-06 23:00:26,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:26,785 INFO L263 TraceCheckSpWp]: Trace formula consists of 615 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:00:26,788 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:00:26,880 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-06 23:00:26,880 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:00:26,880 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:00:26,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [348162170] [2021-12-06 23:00:26,881 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [348162170] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:00:26,881 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:00:26,881 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:00:26,881 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [995984202] [2021-12-06 23:00:26,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:00:26,882 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:00:26,883 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:00:26,883 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:00:26,883 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:00:26,884 INFO L87 Difference]: Start difference. First operand 907 states and 1262 transitions. Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 23:00:27,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:00:27,096 INFO L93 Difference]: Finished difference Result 2081 states and 2880 transitions. [2021-12-06 23:00:27,097 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:00:27,097 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 68 [2021-12-06 23:00:27,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:00:27,108 INFO L225 Difference]: With dead ends: 2081 [2021-12-06 23:00:27,108 INFO L226 Difference]: Without dead ends: 1201 [2021-12-06 23:00:27,112 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:00:27,113 INFO L933 BasicCegarLoop]: 847 mSDtfsCounter, 296 mSDsluCounter, 634 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 296 SdHoareTripleChecker+Valid, 1481 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:00:27,114 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [296 Valid, 1481 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:00:27,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1201 states. [2021-12-06 23:00:27,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1201 to 1196. [2021-12-06 23:00:27,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1196 states, 903 states have (on average 1.3565891472868217) internal successors, (1225), 908 states have internal predecessors, (1225), 210 states have call successors, (210), 83 states have call predecessors, (210), 82 states have return successors, (209), 208 states have call predecessors, (209), 209 states have call successors, (209) [2021-12-06 23:00:27,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1196 states to 1196 states and 1644 transitions. [2021-12-06 23:00:27,186 INFO L78 Accepts]: Start accepts. Automaton has 1196 states and 1644 transitions. Word has length 68 [2021-12-06 23:00:27,186 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:00:27,186 INFO L470 AbstractCegarLoop]: Abstraction has 1196 states and 1644 transitions. [2021-12-06 23:00:27,187 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-06 23:00:27,187 INFO L276 IsEmpty]: Start isEmpty. Operand 1196 states and 1644 transitions. [2021-12-06 23:00:27,193 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-12-06 23:00:27,193 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:27,194 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:27,211 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-06 23:00:27,394 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:00:27,394 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:27,395 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:27,395 INFO L85 PathProgramCache]: Analyzing trace with hash -1703027901, now seen corresponding path program 1 times [2021-12-06 23:00:27,395 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:00:27,396 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [10124781] [2021-12-06 23:00:27,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:27,396 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:00:27,396 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:00:27,397 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:00:27,397 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-06 23:00:27,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:27,728 INFO L263 TraceCheckSpWp]: Trace formula consists of 732 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 23:00:27,732 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:00:27,901 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2021-12-06 23:00:27,901 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:00:27,902 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:00:27,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [10124781] [2021-12-06 23:00:27,902 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [10124781] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:00:27,902 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:00:27,902 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:00:27,902 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1952741411] [2021-12-06 23:00:27,902 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:00:27,903 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:00:27,903 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:00:27,903 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:00:27,903 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:00:27,903 INFO L87 Difference]: Start difference. First operand 1196 states and 1644 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:00:28,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:00:28,230 INFO L93 Difference]: Finished difference Result 3184 states and 4558 transitions. [2021-12-06 23:00:28,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:00:28,233 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) Word has length 89 [2021-12-06 23:00:28,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:00:28,249 INFO L225 Difference]: With dead ends: 3184 [2021-12-06 23:00:28,249 INFO L226 Difference]: Without dead ends: 2018 [2021-12-06 23:00:28,254 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:00:28,255 INFO L933 BasicCegarLoop]: 1212 mSDtfsCounter, 448 mSDsluCounter, 4198 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 485 SdHoareTripleChecker+Valid, 5410 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 23:00:28,255 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [485 Valid, 5410 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 23:00:28,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2018 states. [2021-12-06 23:00:28,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2018 to 1208. [2021-12-06 23:00:28,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1208 states, 913 states have (on average 1.352683461117196) internal successors, (1235), 918 states have internal predecessors, (1235), 210 states have call successors, (210), 83 states have call predecessors, (210), 84 states have return successors, (213), 210 states have call predecessors, (213), 209 states have call successors, (213) [2021-12-06 23:00:28,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1208 states to 1208 states and 1658 transitions. [2021-12-06 23:00:28,316 INFO L78 Accepts]: Start accepts. Automaton has 1208 states and 1658 transitions. Word has length 89 [2021-12-06 23:00:28,316 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:00:28,316 INFO L470 AbstractCegarLoop]: Abstraction has 1208 states and 1658 transitions. [2021-12-06 23:00:28,317 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:00:28,317 INFO L276 IsEmpty]: Start isEmpty. Operand 1208 states and 1658 transitions. [2021-12-06 23:00:28,320 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2021-12-06 23:00:28,320 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:28,320 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:28,334 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Ended with exit code 0 [2021-12-06 23:00:28,521 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:00:28,521 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:28,522 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:28,522 INFO L85 PathProgramCache]: Analyzing trace with hash 1234457031, now seen corresponding path program 1 times [2021-12-06 23:00:28,523 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:00:28,523 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [333873587] [2021-12-06 23:00:28,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:28,523 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:00:28,523 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:00:28,524 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:00:28,526 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-06 23:00:28,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:28,816 INFO L263 TraceCheckSpWp]: Trace formula consists of 698 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:00:28,819 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:00:28,969 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-12-06 23:00:28,969 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:00:28,969 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:00:28,970 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [333873587] [2021-12-06 23:00:28,970 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [333873587] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:00:28,970 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:00:28,970 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:00:28,970 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [272258422] [2021-12-06 23:00:28,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:00:28,971 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:00:28,971 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:00:28,971 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:00:28,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:00:28,972 INFO L87 Difference]: Start difference. First operand 1208 states and 1658 transitions. Second operand has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-06 23:00:29,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:00:29,240 INFO L93 Difference]: Finished difference Result 3158 states and 4354 transitions. [2021-12-06 23:00:29,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:00:29,241 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 100 [2021-12-06 23:00:29,241 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:00:29,250 INFO L225 Difference]: With dead ends: 3158 [2021-12-06 23:00:29,250 INFO L226 Difference]: Without dead ends: 1980 [2021-12-06 23:00:29,253 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 98 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:00:29,254 INFO L933 BasicCegarLoop]: 948 mSDtfsCounter, 610 mSDsluCounter, 605 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 610 SdHoareTripleChecker+Valid, 1553 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 23:00:29,254 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [610 Valid, 1553 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 23:00:29,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1980 states. [2021-12-06 23:00:29,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1980 to 1975. [2021-12-06 23:00:29,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1975 states, 1510 states have (on average 1.3410596026490067) internal successors, (2025), 1519 states have internal predecessors, (2025), 323 states have call successors, (323), 139 states have call predecessors, (323), 141 states have return successors, (328), 323 states have call predecessors, (328), 322 states have call successors, (328) [2021-12-06 23:00:29,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1975 states to 1975 states and 2676 transitions. [2021-12-06 23:00:29,321 INFO L78 Accepts]: Start accepts. Automaton has 1975 states and 2676 transitions. Word has length 100 [2021-12-06 23:00:29,321 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:00:29,321 INFO L470 AbstractCegarLoop]: Abstraction has 1975 states and 2676 transitions. [2021-12-06 23:00:29,321 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-06 23:00:29,321 INFO L276 IsEmpty]: Start isEmpty. Operand 1975 states and 2676 transitions. [2021-12-06 23:00:29,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-06 23:00:29,325 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:29,325 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:29,337 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2021-12-06 23:00:29,526 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:00:29,526 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:29,526 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:29,527 INFO L85 PathProgramCache]: Analyzing trace with hash -1464572768, now seen corresponding path program 1 times [2021-12-06 23:00:29,527 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:00:29,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [872103771] [2021-12-06 23:00:29,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:29,528 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:00:29,528 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:00:29,528 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:00:29,529 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-06 23:00:29,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:00:29,826 INFO L263 TraceCheckSpWp]: Trace formula consists of 697 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 23:00:29,828 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:00:29,908 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2021-12-06 23:00:29,908 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:00:29,908 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:00:29,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [872103771] [2021-12-06 23:00:29,908 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [872103771] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:00:29,908 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:00:29,908 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:00:29,908 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [20852298] [2021-12-06 23:00:29,908 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:00:29,909 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:00:29,909 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:00:29,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:00:29,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:00:29,909 INFO L87 Difference]: Start difference. First operand 1975 states and 2676 transitions. Second operand has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:00:29,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:00:29,984 INFO L93 Difference]: Finished difference Result 3928 states and 5334 transitions. [2021-12-06 23:00:29,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:00:29,984 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 99 [2021-12-06 23:00:29,985 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:00:29,994 INFO L225 Difference]: With dead ends: 3928 [2021-12-06 23:00:29,994 INFO L226 Difference]: Without dead ends: 1983 [2021-12-06 23:00:29,998 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 97 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:00:29,999 INFO L933 BasicCegarLoop]: 717 mSDtfsCounter, 18 mSDsluCounter, 690 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 1407 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:00:29,999 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [23 Valid, 1407 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:00:30,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1983 states. [2021-12-06 23:00:30,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1983 to 1979. [2021-12-06 23:00:30,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1979 states, 1514 states have (on average 1.3375165125495376) internal successors, (2025), 1523 states have internal predecessors, (2025), 323 states have call successors, (323), 139 states have call predecessors, (323), 141 states have return successors, (328), 323 states have call predecessors, (328), 322 states have call successors, (328) [2021-12-06 23:00:30,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1979 states to 1979 states and 2676 transitions. [2021-12-06 23:00:30,066 INFO L78 Accepts]: Start accepts. Automaton has 1979 states and 2676 transitions. Word has length 99 [2021-12-06 23:00:30,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:00:30,066 INFO L470 AbstractCegarLoop]: Abstraction has 1979 states and 2676 transitions. [2021-12-06 23:00:30,066 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:00:30,067 INFO L276 IsEmpty]: Start isEmpty. Operand 1979 states and 2676 transitions. [2021-12-06 23:00:30,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-06 23:00:30,071 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:00:30,071 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:00:30,089 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Ended with exit code 0 [2021-12-06 23:00:30,271 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:00:30,271 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:00:30,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:00:30,272 INFO L85 PathProgramCache]: Analyzing trace with hash 1809326174, now seen corresponding path program 1 times [2021-12-06 23:00:30,273 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:00:30,273 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2033590802] [2021-12-06 23:00:30,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:00:30,273 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:00:30,273 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:00:30,274 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:00:30,274 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-06 23:00:30,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:00:30,718 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:00:31,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:00:31,270 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-06 23:00:31,270 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 23:00:31,271 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 23:00:31,288 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-12-06 23:00:31,473 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:00:31,483 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2021-12-06 23:00:31,492 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 23:00:31,685 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 11:00:31 BoogieIcfgContainer [2021-12-06 23:00:31,685 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 23:00:31,686 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 23:00:31,686 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 23:00:31,686 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 23:00:31,686 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:00:25" (3/4) ... [2021-12-06 23:00:31,689 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 23:00:31,689 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 23:00:31,690 INFO L158 Benchmark]: Toolchain (without parser) took 14647.35ms. Allocated memory was 54.5MB in the beginning and 216.0MB in the end (delta: 161.5MB). Free memory was 34.4MB in the beginning and 132.0MB in the end (delta: -97.6MB). Peak memory consumption was 63.9MB. Max. memory is 16.1GB. [2021-12-06 23:00:31,690 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 54.5MB. Free memory is still 35.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:00:31,690 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1415.91ms. Allocated memory was 54.5MB in the beginning and 98.6MB in the end (delta: 44.0MB). Free memory was 34.1MB in the beginning and 48.1MB in the end (delta: -14.1MB). Peak memory consumption was 48.1MB. Max. memory is 16.1GB. [2021-12-06 23:00:31,691 INFO L158 Benchmark]: Boogie Procedure Inliner took 93.71ms. Allocated memory is still 98.6MB. Free memory was 48.1MB in the beginning and 38.4MB in the end (delta: 9.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-06 23:00:31,691 INFO L158 Benchmark]: Boogie Preprocessor took 90.85ms. Allocated memory was 98.6MB in the beginning and 136.3MB in the end (delta: 37.7MB). Free memory was 38.4MB in the beginning and 81.7MB in the end (delta: -43.2MB). Peak memory consumption was 13.5MB. Max. memory is 16.1GB. [2021-12-06 23:00:31,692 INFO L158 Benchmark]: RCFGBuilder took 6521.88ms. Allocated memory was 136.3MB in the beginning and 216.0MB in the end (delta: 79.7MB). Free memory was 81.7MB in the beginning and 138.5MB in the end (delta: -56.9MB). Peak memory consumption was 35.0MB. Max. memory is 16.1GB. [2021-12-06 23:00:31,692 INFO L158 Benchmark]: TraceAbstraction took 6516.31ms. Allocated memory is still 216.0MB. Free memory was 137.5MB in the beginning and 132.0MB in the end (delta: 5.5MB). Peak memory consumption was 97.7MB. Max. memory is 16.1GB. [2021-12-06 23:00:31,692 INFO L158 Benchmark]: Witness Printer took 3.61ms. Allocated memory is still 216.0MB. Free memory is still 132.0MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:00:31,694 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 54.5MB. Free memory is still 35.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1415.91ms. Allocated memory was 54.5MB in the beginning and 98.6MB in the end (delta: 44.0MB). Free memory was 34.1MB in the beginning and 48.1MB in the end (delta: -14.1MB). Peak memory consumption was 48.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 93.71ms. Allocated memory is still 98.6MB. Free memory was 48.1MB in the beginning and 38.4MB in the end (delta: 9.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 90.85ms. Allocated memory was 98.6MB in the beginning and 136.3MB in the end (delta: 37.7MB). Free memory was 38.4MB in the beginning and 81.7MB in the end (delta: -43.2MB). Peak memory consumption was 13.5MB. Max. memory is 16.1GB. * RCFGBuilder took 6521.88ms. Allocated memory was 136.3MB in the beginning and 216.0MB in the end (delta: 79.7MB). Free memory was 81.7MB in the beginning and 138.5MB in the end (delta: -56.9MB). Peak memory consumption was 35.0MB. Max. memory is 16.1GB. * TraceAbstraction took 6516.31ms. Allocated memory is still 216.0MB. Free memory was 137.5MB in the beginning and 132.0MB in the end (delta: 5.5MB). Peak memory consumption was 97.7MB. Max. memory is 16.1GB. * Witness Printer took 3.61ms. Allocated memory is still 216.0MB. Free memory is still 132.0MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 3987]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 5883. Possible FailurePath: [L4010] int ldv_irq_1_2 = 0; [L4011] int LDV_IN_INTERRUPT = 1; [L4012] int ldv_irq_1_3 = 0; [L4013] void *ldv_irq_data_1_1 ; [L4014] int ldv_irq_1_1 = 0; [L4015] int ldv_irq_1_0 = 0; [L4016] struct urb *max3421_hcd_desc_group0 ; [L4017] int ldv_irq_line_1_3 ; [L4018] void *ldv_irq_data_1_0 ; [L4019] int ldv_state_variable_0 ; [L4020] struct usb_hcd *max3421_hcd_desc_group1 ; [L4021] int ldv_state_variable_3 ; [L4022] int ldv_irq_line_1_0 ; [L4023] int ldv_state_variable_2 ; [L4024] void *ldv_irq_data_1_3 ; [L4025] struct spi_device *max3421_driver_group0 ; [L4026] int ref_cnt ; [L4027] int ldv_irq_line_1_1 ; [L4028] void *ldv_irq_data_1_2 ; [L4029] int ldv_state_variable_1 ; [L4030] int ldv_irq_line_1_2 ; [L4208] static struct max3421_hcd *max3421_hcd_list ; [L4209-L4213] static int const hrsl_to_error[16U] = { 0, -22, -22, -22, -11, -32, -84, -71, -121, -71, -71, -84, -5, -5, -62, -75}; [L5882-L5888] static struct hc_driver max3421_hcd_desc = {"max3421", "MAX3421 USB Host-Controller Driver", 192UL, 0, 16, & max3421_reset, & max3421_start, 0, 0, & max3421_stop, 0, & max3421_get_frame_number, & max3421_urb_enqueue, & max3421_urb_dequeue, & max3421_map_urb_for_dma, & max3421_unmap_urb_for_dma, & max3421_endpoint_disable, 0, & max3421_hub_status_data, & max3421_hub_control, & max3421_bus_suspend, & max3421_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L6027-L6029] static struct spi_driver max3421_driver = {0, & max3421_probe, & max3421_remove, 0, 0, 0, {"max3421-hcd", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}; [L6045] int ldv_retval_0 ; [L6046] int ldv_retval_1 ; [L6049] int ldv_retval_2 ; [L6545] int ldv_spin = 0; VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6194] char *ldvarg7 ; [L6195] void *tmp ; [L6196] u16 ldvarg3 ; [L6197] u16 tmp___0 ; [L6198] u16 ldvarg0 ; [L6199] u16 tmp___1 ; [L6200] gfp_t ldvarg5 ; [L6201] gfp_t ldvarg6 ; [L6202] struct usb_host_endpoint *ldvarg8 ; [L6203] void *tmp___2 ; [L6204] u16 ldvarg1 ; [L6205] u16 tmp___3 ; [L6206] char *ldvarg4 ; [L6207] void *tmp___4 ; [L6208] int ldvarg9 ; [L6209] int tmp___5 ; [L6210] u16 ldvarg2 ; [L6211] u16 tmp___6 ; [L6212] int tmp___7 ; [L6213] int tmp___8 ; [L6214] int tmp___9 ; [L6215] int tmp___10 ; VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=2147483648] [L6217] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] tmp = ldv_zalloc(1UL) [L6218] ldvarg7 = (char *)tmp [L6219] tmp___0 = __VERIFIER_nondet_u16() [L6220] ldvarg3 = tmp___0 [L6221] tmp___1 = __VERIFIER_nondet_u16() [L6222] ldvarg0 = tmp___1 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg3=12, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13] [L6223] CALL, EXPR ldv_zalloc(72UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=72, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=72, tmp___0=2147483648] [L6223] RET, EXPR ldv_zalloc(72UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(72UL)={0:0}, ldvarg0=13, ldvarg3=12, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13] [L6223] tmp___2 = ldv_zalloc(72UL) [L6224] ldvarg8 = (struct usb_host_endpoint *)tmp___2 [L6225] tmp___3 = __VERIFIER_nondet_u16() [L6226] ldvarg1 = tmp___3 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg1=14, ldvarg3=12, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14] [L6227] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=2147483648] [L6227] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, ldvarg0=13, ldvarg1=14, ldvarg3=12, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14] [L6227] tmp___4 = ldv_zalloc(1UL) [L6228] ldvarg4 = (char *)tmp___4 [L6229] tmp___5 = __VERIFIER_nondet_int() [L6230] ldvarg9 = tmp___5 [L6231] tmp___6 = __VERIFIER_nondet_u16() [L6232] ldvarg2 = tmp___6 [L6233] FCALL ldv_initialize() [L6234] ldvarg5 = (gfp_t)__VERIFIER_nondet_int() [L6235] ldvarg6 = (gfp_t)__VERIFIER_nondet_int() [L6236] ldv_state_variable_1 = 1 [L6237] ref_cnt = 0 [L6238] ldv_state_variable_0 = 1 [L6239] ldv_state_variable_3 = 0 [L6240] ldv_state_variable_2 = 0 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=1] [L6251] COND TRUE ldv_state_variable_0 != 0 [L6252] tmp___8 = __VERIFIER_nondet_int() [L6254] case 0: [L6262] case 1: VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=1, tmp___8=1] [L6263] COND TRUE ldv_state_variable_0 == 1 [L6264] CALL, EXPR max3421_driver_init() [L6032] int tmp ; [L6034] CALL, EXPR spi_register_driver(& max3421_driver) [L6691] return __VERIFIER_nondet_int(); [L6034] RET, EXPR spi_register_driver(& max3421_driver) [L6034] tmp = spi_register_driver(& max3421_driver) [L6035] return (tmp); VAL [\result=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp=0] [L6264] RET, EXPR max3421_driver_init() [L6264] ldv_retval_0 = max3421_driver_init() [L6265] COND TRUE ldv_retval_0 == 0 [L6266] ldv_state_variable_0 = 3 [L6267] ldv_state_variable_2 = 1 [L6268] CALL ldv_initialize_spi_driver_2() [L6159] void *tmp ; VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] CALL, EXPR ldv_zalloc(1496UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1496, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1496, tmp___0=2147483648] [L6161] RET, EXPR ldv_zalloc(1496UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_zalloc(1496UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] tmp = ldv_zalloc(1496UL) [L6162] max3421_driver_group0 = (struct spi_device *)tmp VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6268] RET ldv_initialize_spi_driver_2() [L6269] ldv_state_variable_3 = 1 [L6270] CALL ldv_initialize_hc_driver_3() [L6122] void *tmp ; [L6123] void *tmp___0 ; VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] CALL, EXPR ldv_zalloc(192UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=192, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=192, tmp___0=2147483648] [L6125] RET, EXPR ldv_zalloc(192UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(192UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] tmp = ldv_zalloc(192UL) [L6126] max3421_hcd_desc_group0 = (struct urb *)tmp VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] CALL, EXPR ldv_zalloc(968UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=968, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=968, tmp___0=2147483648] [L6127] RET, EXPR ldv_zalloc(968UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(968UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] tmp___0 = ldv_zalloc(968UL) [L6128] max3421_hcd_desc_group1 = (struct usb_hcd *)tmp___0 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}] [L6270] RET ldv_initialize_hc_driver_3() [L6273] COND FALSE !(ldv_retval_0 != 0) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=1, tmp___8=1] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: [L6288] case 2: VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=2, tmp___8=1] [L6289] COND TRUE ldv_state_variable_3 != 0 [L6290] tmp___9 = __VERIFIER_nondet_int() [L6292] case 0: [L6303] case 1: [L6315] case 2: [L6327] case 3: [L6339] case 4: [L6351] case 5: [L6363] case 6: [L6375] case 7: [L6387] case 8: [L6395] case 9: [L6407] case 10: VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=2, tmp___8=1, tmp___9=10] [L6408] COND TRUE ldv_state_variable_3 == 1 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=2, tmp___8=1, tmp___9=10] [L6409] CALL max3421_urb_enqueue(max3421_hcd_desc_group1, max3421_hcd_desc_group0, ldvarg5) VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5535] struct spi_device *spi ; [L5536] struct spi_device *tmp ; [L5537] struct max3421_hcd *max3421_hcd ; [L5538] struct max3421_hcd *tmp___0 ; [L5539] struct max3421_ep *max3421_ep ; [L5540] unsigned long flags ; [L5541] int retval ; [L5542] void *tmp___1 ; [L5544] EXPR hcd->self.controller VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hcd->self.controller={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, urb={0:0}, urb={0:0}] [L5544] CALL, EXPR to_spi_device(hcd->self.controller) VAL [\old(ldv_spin)=0, __this_module={0:0}, dev={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4062] struct device const *__mptr ; [L4063] struct spi_device *tmp ; VAL [\old(ldv_spin)=0, __this_module={0:0}, dev={0:-9223372036854775808}, dev={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4065] COND TRUE (unsigned long )dev != (unsigned long )((struct device *)0) [L4066] __mptr = (struct device const *)dev [L4067] tmp = (struct spi_device *)__mptr VAL [\old(ldv_spin)=0, __mptr={0:-9223372036854775808}, __this_module={0:0}, dev={0:-9223372036854775808}, dev={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:-9223372036854775808}] [L4071] return (tmp); VAL [\old(ldv_spin)=0, \result={0:-9223372036854775808}, __mptr={0:-9223372036854775808}, __this_module={0:0}, dev={0:-9223372036854775808}, dev={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:-9223372036854775808}] [L5544] RET, EXPR to_spi_device(hcd->self.controller) VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hcd->self.controller={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, to_spi_device(hcd->self.controller)={0:-9223372036854775808}, urb={0:0}, urb={0:0}] [L5544] tmp = to_spi_device(hcd->self.controller) [L5545] spi = tmp VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, urb={0:0}, urb={0:0}] [L5546] CALL, EXPR hcd_to_max3421(hcd) VAL [\old(ldv_spin)=0, __this_module={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4223] return ((struct max3421_hcd *)(& hcd->hcd_priv)); VAL [\old(ldv_spin)=0, \result={0:899}, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5546] RET, EXPR hcd_to_max3421(hcd) VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hcd_to_max3421(hcd)={0:899}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, urb={0:0}, urb={0:0}] [L5546] tmp___0 = hcd_to_max3421(hcd) [L5547] max3421_hcd = tmp___0 [L5548] urb->pipe [L5549] case 1U: VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=-2147483648] [L5550] case 0U: VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=-2147483648] [L5557] default: VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=-2147483648] [L5561] CALL ldv_spin_lock() VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6582] ldv_spin = 1 VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5561] RET ldv_spin_lock() VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=-2147483648] [L5562] EXPR urb->ep [L5562] EXPR (urb->ep)->hcpriv [L5562] max3421_ep = (struct max3421_ep *)(urb->ep)->hcpriv [L5563] COND TRUE (unsigned long )max3421_ep == (unsigned long )((struct max3421_ep *)0) [L5564] CALL kzalloc(40UL, mem_flags) [L6513] CALL ldv_check_alloc_flags(flags) VAL [\old(flags)=16, \old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6549] COND FALSE !(ldv_spin == 0 || ! (flags & 16U)) VAL [\old(flags)=16, \old(ldv_spin)=0, __this_module={0:0}, flags=16, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6551] CALL ldv_error() VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3987] reach_error() VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 35 procedures, 536 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.3s, OverallIterations: 6, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1983 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1941 mSDsluCounter, 11391 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6851 mSDsCounter, 129 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 194 IncrementalHoareTripleChecker+Invalid, 323 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 129 mSolverCounterUnsat, 4540 mSDtfsCounter, 194 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 412 GetRequests, 402 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1979occurred in iteration=5, InterpolantAutomatonStates: 18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 5 MinimizatonAttempts, 827 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.3s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 513 NumberOfCodeBlocks, 513 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 409 ConstructedInterpolants, 0 QuantifiedInterpolants, 523 SizeOfPredicates, 4 NumberOfNonLiveVariables, 3392 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 5 InterpolantComputations, 5 PerfectInterpolantSequences, 213/213 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 23:00:31,730 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_288168db-585f-4e50-832e-a48f7458d042/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample