./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:45:25,040 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:45:25,042 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:45:25,071 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:45:25,072 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:45:25,073 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:45:25,074 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:45:25,076 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:45:25,078 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:45:25,079 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:45:25,080 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:45:25,082 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:45:25,082 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:45:25,083 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:45:25,085 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:45:25,086 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:45:25,087 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:45:25,088 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:45:25,090 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:45:25,092 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:45:25,094 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:45:25,095 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:45:25,097 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:45:25,098 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:45:25,101 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:45:25,101 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:45:25,102 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:45:25,103 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:45:25,103 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:45:25,104 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:45:25,105 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:45:25,105 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:45:25,106 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:45:25,107 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:45:25,108 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:45:25,108 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:45:25,109 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:45:25,109 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:45:25,109 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:45:25,110 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:45:25,110 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:45:25,111 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-06 23:45:25,134 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:45:25,135 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:45:25,135 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:45:25,135 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:45:25,136 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 23:45:25,136 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 23:45:25,136 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:45:25,137 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:45:25,137 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:45:25,137 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:45:25,137 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 23:45:25,137 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:45:25,137 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 23:45:25,138 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 23:45:25,138 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 23:45:25,138 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:45:25,138 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:45:25,138 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 23:45:25,139 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:45:25,139 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:45:25,139 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 23:45:25,139 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:45:25,139 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:45:25,139 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 23:45:25,140 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 23:45:25,140 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 23:45:25,140 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 23:45:25,140 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 23:45:25,140 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 23:45:25,140 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 23:45:25,141 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:45:25,141 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 [2021-12-06 23:45:25,324 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:45:25,341 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:45:25,343 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:45:25,344 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:45:25,344 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:45:25,346 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 23:45:25,394 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data/3108e7faa/ccead6e307c2404890bc401a1e49142c/FLAG018a8ac64 [2021-12-06 23:45:25,963 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:45:25,963 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 23:45:25,986 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data/3108e7faa/ccead6e307c2404890bc401a1e49142c/FLAG018a8ac64 [2021-12-06 23:45:26,423 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data/3108e7faa/ccead6e307c2404890bc401a1e49142c [2021-12-06 23:45:26,425 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:45:26,426 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:45:26,428 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:45:26,428 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:45:26,432 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:45:26,433 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:45:26" (1/1) ... [2021-12-06 23:45:26,434 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4d1c938c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:26, skipping insertion in model container [2021-12-06 23:45:26,434 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:45:26" (1/1) ... [2021-12-06 23:45:26,441 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:45:26,545 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:45:27,709 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-06 23:45:27,743 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:45:27,759 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:45:27,956 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-06 23:45:27,962 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:45:28,015 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:45:28,016 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28 WrapperNode [2021-12-06 23:45:28,016 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:45:28,016 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:45:28,017 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:45:28,017 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:45:28,023 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,075 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,199 INFO L137 Inliner]: procedures = 261, calls = 1811, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4510 [2021-12-06 23:45:28,200 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:45:28,200 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:45:28,200 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:45:28,200 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:45:28,206 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,207 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,218 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,218 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,298 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,312 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,328 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,349 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:45:28,350 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:45:28,350 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:45:28,350 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:45:28,351 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (1/1) ... [2021-12-06 23:45:28,356 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:45:28,364 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:45:28,374 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 23:45:28,376 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 23:45:28,404 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-12-06 23:45:28,405 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-12-06 23:45:28,405 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_12 [2021-12-06 23:45:28,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_12 [2021-12-06 23:45:28,405 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 23:45:28,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 23:45:28,405 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 23:45:28,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 23:45:28,405 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-06 23:45:28,405 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-06 23:45:28,406 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-12-06 23:45:28,406 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-12-06 23:45:28,406 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-12-06 23:45:28,406 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-12-06 23:45:28,406 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-12-06 23:45:28,406 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-12-06 23:45:28,406 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-06 23:45:28,406 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-06 23:45:28,406 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-12-06 23:45:28,406 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-12-06 23:45:28,406 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 23:45:28,407 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 23:45:28,407 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-06 23:45:28,407 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-06 23:45:28,407 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-12-06 23:45:28,407 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-12-06 23:45:28,407 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-12-06 23:45:28,407 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-12-06 23:45:28,407 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_50 [2021-12-06 23:45:28,407 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_50 [2021-12-06 23:45:28,407 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-12-06 23:45:28,408 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-12-06 23:45:28,408 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 23:45:28,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 23:45:28,408 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 23:45:28,408 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 23:45:28,408 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 23:45:28,408 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 23:45:28,408 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-12-06 23:45:28,408 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-12-06 23:45:28,408 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-12-06 23:45:28,409 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-12-06 23:45:28,409 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-12-06 23:45:28,409 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-12-06 23:45:28,409 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-12-06 23:45:28,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-12-06 23:45:28,409 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-12-06 23:45:28,409 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-12-06 23:45:28,409 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_29 [2021-12-06 23:45:28,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_29 [2021-12-06 23:45:28,409 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-12-06 23:45:28,410 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-12-06 23:45:28,410 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 23:45:28,410 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_27 [2021-12-06 23:45:28,410 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_27 [2021-12-06 23:45:28,410 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-06 23:45:28,410 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-06 23:45:28,410 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-12-06 23:45:28,410 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-12-06 23:45:28,410 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 23:45:28,411 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_13 [2021-12-06 23:45:28,411 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_13 [2021-12-06 23:45:28,411 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-12-06 23:45:28,411 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-12-06 23:45:28,411 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-12-06 23:45:28,411 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-12-06 23:45:28,411 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-12-06 23:45:28,411 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-12-06 23:45:28,412 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-12-06 23:45:28,412 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-12-06 23:45:28,412 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_15 [2021-12-06 23:45:28,412 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_15 [2021-12-06 23:45:28,412 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 23:45:28,412 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 23:45:28,412 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-12-06 23:45:28,412 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-12-06 23:45:28,412 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-06 23:45:28,412 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-06 23:45:28,412 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-12-06 23:45:28,413 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-12-06 23:45:28,413 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-12-06 23:45:28,413 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-12-06 23:45:28,413 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-12-06 23:45:28,413 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-12-06 23:45:28,413 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-12-06 23:45:28,413 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-12-06 23:45:28,413 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-12-06 23:45:28,413 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-12-06 23:45:28,413 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-12-06 23:45:28,414 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-12-06 23:45:28,414 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-12-06 23:45:28,414 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-12-06 23:45:28,414 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-12-06 23:45:28,414 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-12-06 23:45:28,414 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-12-06 23:45:28,414 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-12-06 23:45:28,414 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-06 23:45:28,415 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-12-06 23:45:28,415 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-12-06 23:45:28,415 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-06 23:45:28,415 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_4 [2021-12-06 23:45:28,415 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_4 [2021-12-06 23:45:28,415 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-12-06 23:45:28,415 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-12-06 23:45:28,416 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-12-06 23:45:28,416 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-12-06 23:45:28,416 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-06 23:45:28,416 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-06 23:45:28,416 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-06 23:45:28,416 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 23:45:28,416 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 23:45:28,416 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-06 23:45:28,416 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-06 23:45:28,416 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-12-06 23:45:28,416 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-12-06 23:45:28,417 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-06 23:45:28,417 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-06 23:45:28,417 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 23:45:28,417 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 23:45:28,417 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-12-06 23:45:28,417 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-12-06 23:45:28,417 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-06 23:45:28,417 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-12-06 23:45:28,418 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-12-06 23:45:28,418 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-12-06 23:45:28,418 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-12-06 23:45:28,418 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-12-06 23:45:28,418 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-12-06 23:45:28,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 23:45:28,418 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 23:45:28,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_32 [2021-12-06 23:45:28,419 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_32 [2021-12-06 23:45:28,419 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-12-06 23:45:28,419 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-12-06 23:45:28,419 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 23:45:28,419 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-12-06 23:45:28,419 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-12-06 23:45:28,419 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_4 [2021-12-06 23:45:28,420 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_4 [2021-12-06 23:45:28,420 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-12-06 23:45:28,420 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-12-06 23:45:28,420 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-12-06 23:45:28,420 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-12-06 23:45:28,420 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-12-06 23:45:28,420 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-12-06 23:45:28,420 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:45:28,420 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-12-06 23:45:28,420 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-12-06 23:45:28,420 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_9 [2021-12-06 23:45:28,420 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_9 [2021-12-06 23:45:28,420 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-06 23:45:28,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-06 23:45:28,421 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 23:45:28,421 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-12-06 23:45:28,421 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-12-06 23:45:28,421 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 23:45:28,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 23:45:28,421 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_4 [2021-12-06 23:45:28,421 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_4 [2021-12-06 23:45:28,421 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-12-06 23:45:28,421 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-12-06 23:45:28,421 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-12-06 23:45:28,421 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-12-06 23:45:28,421 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-12-06 23:45:28,422 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-12-06 23:45:28,422 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-12-06 23:45:28,422 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-12-06 23:45:28,422 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-12-06 23:45:28,422 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-12-06 23:45:28,422 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-12-06 23:45:28,422 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-12-06 23:45:28,422 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-12-06 23:45:28,422 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-12-06 23:45:28,422 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-12-06 23:45:28,422 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-12-06 23:45:28,422 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-12-06 23:45:28,422 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-12-06 23:45:28,422 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-12-06 23:45:28,422 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-12-06 23:45:28,423 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-12-06 23:45:28,423 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-12-06 23:45:28,423 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-12-06 23:45:28,423 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-12-06 23:45:28,423 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-12-06 23:45:28,423 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-12-06 23:45:28,423 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2021-12-06 23:45:28,423 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2021-12-06 23:45:28,423 INFO L130 BoogieDeclarations]: Found specification of procedure delayed_work_timer_fn [2021-12-06 23:45:28,423 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_47 [2021-12-06 23:45:28,423 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_47 [2021-12-06 23:45:28,423 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-06 23:45:28,423 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-06 23:45:28,424 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 23:45:28,424 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-12-06 23:45:28,424 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-12-06 23:45:28,424 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-12-06 23:45:28,424 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-12-06 23:45:28,424 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-06 23:45:28,424 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-06 23:45:28,424 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-12-06 23:45:28,424 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-12-06 23:45:28,425 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-12-06 23:45:28,425 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-12-06 23:45:28,425 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-12-06 23:45:28,425 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:45:28,425 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:45:28,851 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:45:28,853 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:45:29,721 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 23:45:32,256 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:45:32,276 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:45:32,276 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-06 23:45:32,280 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:45:32 BoogieIcfgContainer [2021-12-06 23:45:32,280 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:45:32,281 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 23:45:32,281 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 23:45:32,284 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 23:45:32,284 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 11:45:26" (1/3) ... [2021-12-06 23:45:32,284 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@48fbc88a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:45:32, skipping insertion in model container [2021-12-06 23:45:32,284 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:45:28" (2/3) ... [2021-12-06 23:45:32,285 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@48fbc88a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:45:32, skipping insertion in model container [2021-12-06 23:45:32,285 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:45:32" (3/3) ... [2021-12-06 23:45:32,286 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 23:45:32,290 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 23:45:32,290 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 23:45:32,333 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 23:45:32,338 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 23:45:32,338 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 23:45:32,380 INFO L276 IsEmpty]: Start isEmpty. Operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) [2021-12-06 23:45:32,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-12-06 23:45:32,394 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:45:32,394 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:45:32,395 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:45:32,398 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:45:32,399 INFO L85 PathProgramCache]: Analyzing trace with hash -838760980, now seen corresponding path program 1 times [2021-12-06 23:45:32,405 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:45:32,405 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2001456118] [2021-12-06 23:45:32,406 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:45:32,406 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:45:32,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:45:32,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:32,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:32,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:45:32,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:32,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:32,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:45:32,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:32,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:32,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:45:32,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:32,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:32,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:45:32,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:32,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:45:32,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:32,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:32,849 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 23:45:32,850 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:45:32,850 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2001456118] [2021-12-06 23:45:32,850 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2001456118] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:45:32,850 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:45:32,851 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:45:32,852 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [40867756] [2021-12-06 23:45:32,852 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:45:32,855 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:45:32,855 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:45:32,874 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:45:32,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:45:32,879 INFO L87 Difference]: Start difference. First operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 2 states have internal predecessors, (47), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:45:36,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:45:36,965 INFO L93 Difference]: Finished difference Result 3320 states and 4941 transitions. [2021-12-06 23:45:36,966 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 23:45:36,967 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 2 states have internal predecessors, (47), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 113 [2021-12-06 23:45:36,967 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:45:36,990 INFO L225 Difference]: With dead ends: 3320 [2021-12-06 23:45:36,990 INFO L226 Difference]: Without dead ends: 1727 [2021-12-06 23:45:37,002 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:45:37,004 INFO L933 BasicCegarLoop]: 2121 mSDtfsCounter, 1695 mSDsluCounter, 825 mSDsCounter, 0 mSdLazyCounter, 962 mSolverCounterSat, 1508 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1725 SdHoareTripleChecker+Valid, 2946 SdHoareTripleChecker+Invalid, 2470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1508 IncrementalHoareTripleChecker+Valid, 962 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2021-12-06 23:45:37,005 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1725 Valid, 2946 Invalid, 2470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1508 Valid, 962 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2021-12-06 23:45:37,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1727 states. [2021-12-06 23:45:37,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1727 to 1565. [2021-12-06 23:45:37,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1565 states, 1099 states have (on average 1.3876251137397635) internal successors, (1525), 1154 states have internal predecessors, (1525), 373 states have call successors, (373), 93 states have call predecessors, (373), 92 states have return successors, (369), 343 states have call predecessors, (369), 369 states have call successors, (369) [2021-12-06 23:45:37,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1565 states to 1565 states and 2267 transitions. [2021-12-06 23:45:37,146 INFO L78 Accepts]: Start accepts. Automaton has 1565 states and 2267 transitions. Word has length 113 [2021-12-06 23:45:37,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:45:37,147 INFO L470 AbstractCegarLoop]: Abstraction has 1565 states and 2267 transitions. [2021-12-06 23:45:37,147 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 2 states have internal predecessors, (47), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:45:37,147 INFO L276 IsEmpty]: Start isEmpty. Operand 1565 states and 2267 transitions. [2021-12-06 23:45:37,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-12-06 23:45:37,155 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:45:37,155 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:45:37,155 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 23:45:37,156 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:45:37,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:45:37,156 INFO L85 PathProgramCache]: Analyzing trace with hash -1879567644, now seen corresponding path program 1 times [2021-12-06 23:45:37,156 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:45:37,156 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1896976935] [2021-12-06 23:45:37,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:45:37,157 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:45:37,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:45:37,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:37,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:37,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:45:37,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:37,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:37,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:45:37,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:37,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:37,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:45:37,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:37,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:37,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:45:37,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:37,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:45:37,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:37,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:37,428 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 23:45:37,429 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:45:37,429 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1896976935] [2021-12-06 23:45:37,429 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1896976935] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:45:37,429 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:45:37,429 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:45:37,429 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1931717124] [2021-12-06 23:45:37,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:45:37,431 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:45:37,431 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:45:37,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:45:37,431 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:45:37,432 INFO L87 Difference]: Start difference. First operand 1565 states and 2267 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:45:50,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:45:50,826 INFO L93 Difference]: Finished difference Result 4963 states and 7452 transitions. [2021-12-06 23:45:50,827 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:45:50,827 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 113 [2021-12-06 23:45:50,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:45:50,847 INFO L225 Difference]: With dead ends: 4963 [2021-12-06 23:45:50,847 INFO L226 Difference]: Without dead ends: 3421 [2021-12-06 23:45:50,854 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:45:50,855 INFO L933 BasicCegarLoop]: 2626 mSDtfsCounter, 4037 mSDsluCounter, 4459 mSDsCounter, 0 mSdLazyCounter, 4108 mSolverCounterSat, 2174 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4250 SdHoareTripleChecker+Valid, 7085 SdHoareTripleChecker+Invalid, 6282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2174 IncrementalHoareTripleChecker+Valid, 4108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:45:50,856 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4250 Valid, 7085 Invalid, 6282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2174 Valid, 4108 Invalid, 0 Unknown, 0 Unchecked, 13.1s Time] [2021-12-06 23:45:50,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3421 states. [2021-12-06 23:45:50,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3421 to 3128. [2021-12-06 23:45:50,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3128 states, 2197 states have (on average 1.385980883022303) internal successors, (3045), 2307 states have internal predecessors, (3045), 738 states have call successors, (738), 184 states have call predecessors, (738), 192 states have return successors, (786), 690 states have call predecessors, (786), 734 states have call successors, (786) [2021-12-06 23:45:50,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3128 states to 3128 states and 4569 transitions. [2021-12-06 23:45:50,985 INFO L78 Accepts]: Start accepts. Automaton has 3128 states and 4569 transitions. Word has length 113 [2021-12-06 23:45:50,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:45:50,985 INFO L470 AbstractCegarLoop]: Abstraction has 3128 states and 4569 transitions. [2021-12-06 23:45:50,986 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:45:50,986 INFO L276 IsEmpty]: Start isEmpty. Operand 3128 states and 4569 transitions. [2021-12-06 23:45:50,988 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 23:45:50,989 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:45:50,989 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:45:50,989 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 23:45:50,989 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:45:50,989 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:45:50,989 INFO L85 PathProgramCache]: Analyzing trace with hash 1862399358, now seen corresponding path program 1 times [2021-12-06 23:45:50,990 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:45:50,990 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [289153294] [2021-12-06 23:45:50,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:45:50,990 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:45:51,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:45:51,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:51,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:51,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:45:51,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:51,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:51,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:45:51,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:51,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:51,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:45:51,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:51,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:45:51,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:45:51,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:51,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:45:51,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:45:51,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:45:51,195 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 23:45:51,195 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:45:51,196 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [289153294] [2021-12-06 23:45:51,196 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [289153294] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:45:51,196 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:45:51,196 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:45:51,196 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2056287038] [2021-12-06 23:45:51,196 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:45:51,197 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:45:51,197 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:45:51,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:45:51,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:45:51,198 INFO L87 Difference]: Start difference. First operand 3128 states and 4569 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:46:01,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:46:01,502 INFO L93 Difference]: Finished difference Result 9554 states and 14417 transitions. [2021-12-06 23:46:01,503 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:46:01,503 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-12-06 23:46:01,503 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:46:01,537 INFO L225 Difference]: With dead ends: 9554 [2021-12-06 23:46:01,537 INFO L226 Difference]: Without dead ends: 6449 [2021-12-06 23:46:01,550 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:46:01,551 INFO L933 BasicCegarLoop]: 2344 mSDtfsCounter, 3826 mSDsluCounter, 4104 mSDsCounter, 0 mSdLazyCounter, 3762 mSolverCounterSat, 2169 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4002 SdHoareTripleChecker+Valid, 6448 SdHoareTripleChecker+Invalid, 5931 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2169 IncrementalHoareTripleChecker+Valid, 3762 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:46:01,551 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4002 Valid, 6448 Invalid, 5931 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2169 Valid, 3762 Invalid, 0 Unknown, 0 Unchecked, 10.0s Time] [2021-12-06 23:46:01,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6449 states. [2021-12-06 23:46:01,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6449 to 5863. [2021-12-06 23:46:01,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5863 states, 4118 states have (on average 1.3919378338999515) internal successors, (5732), 4333 states have internal predecessors, (5732), 1377 states have call successors, (1377), 350 states have call predecessors, (1377), 367 states have return successors, (1475), 1285 states have call predecessors, (1475), 1373 states have call successors, (1475) [2021-12-06 23:46:01,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5863 states to 5863 states and 8584 transitions. [2021-12-06 23:46:01,791 INFO L78 Accepts]: Start accepts. Automaton has 5863 states and 8584 transitions. Word has length 114 [2021-12-06 23:46:01,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:46:01,791 INFO L470 AbstractCegarLoop]: Abstraction has 5863 states and 8584 transitions. [2021-12-06 23:46:01,792 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:46:01,792 INFO L276 IsEmpty]: Start isEmpty. Operand 5863 states and 8584 transitions. [2021-12-06 23:46:01,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-12-06 23:46:01,794 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:46:01,794 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:46:01,794 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 23:46:01,794 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:46:01,795 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:46:01,795 INFO L85 PathProgramCache]: Analyzing trace with hash 1899264295, now seen corresponding path program 1 times [2021-12-06 23:46:01,795 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:46:01,795 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354795920] [2021-12-06 23:46:01,795 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:46:01,795 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:46:01,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:46:01,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:01,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:01,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:46:01,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:01,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:01,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:46:01,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:01,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:01,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:46:01,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:01,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:01,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:01,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:02,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:46:02,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:02,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:02,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:02,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:46:02,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:02,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:02,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:02,039 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 23:46:02,040 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:46:02,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1354795920] [2021-12-06 23:46:02,040 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1354795920] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:46:02,040 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:46:02,040 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:46:02,041 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1441403834] [2021-12-06 23:46:02,041 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:46:02,041 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:46:02,041 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:46:02,042 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:46:02,042 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:46:02,042 INFO L87 Difference]: Start difference. First operand 5863 states and 8584 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:46:06,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:46:06,204 INFO L93 Difference]: Finished difference Result 6444 states and 9628 transitions. [2021-12-06 23:46:06,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:46:06,204 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 115 [2021-12-06 23:46:06,204 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:46:06,248 INFO L225 Difference]: With dead ends: 6444 [2021-12-06 23:46:06,248 INFO L226 Difference]: Without dead ends: 6441 [2021-12-06 23:46:06,250 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:46:06,252 INFO L933 BasicCegarLoop]: 2042 mSDtfsCounter, 3609 mSDsluCounter, 811 mSDsCounter, 0 mSdLazyCounter, 990 mSolverCounterSat, 1835 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3822 SdHoareTripleChecker+Valid, 2853 SdHoareTripleChecker+Invalid, 2825 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1835 IncrementalHoareTripleChecker+Valid, 990 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:46:06,252 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3822 Valid, 2853 Invalid, 2825 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1835 Valid, 990 Invalid, 0 Unknown, 0 Unchecked, 4.0s Time] [2021-12-06 23:46:06,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6441 states. [2021-12-06 23:46:06,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6441 to 5862. [2021-12-06 23:46:06,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5862 states, 4118 states have (on average 1.3916949975716366) internal successors, (5731), 4332 states have internal predecessors, (5731), 1376 states have call successors, (1376), 350 states have call predecessors, (1376), 367 states have return successors, (1475), 1285 states have call predecessors, (1475), 1373 states have call successors, (1475) [2021-12-06 23:46:06,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5862 states to 5862 states and 8582 transitions. [2021-12-06 23:46:06,475 INFO L78 Accepts]: Start accepts. Automaton has 5862 states and 8582 transitions. Word has length 115 [2021-12-06 23:46:06,476 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:46:06,476 INFO L470 AbstractCegarLoop]: Abstraction has 5862 states and 8582 transitions. [2021-12-06 23:46:06,476 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:46:06,476 INFO L276 IsEmpty]: Start isEmpty. Operand 5862 states and 8582 transitions. [2021-12-06 23:46:06,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-12-06 23:46:06,478 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:46:06,478 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:46:06,479 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 23:46:06,479 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:46:06,479 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:46:06,479 INFO L85 PathProgramCache]: Analyzing trace with hash -1252885087, now seen corresponding path program 1 times [2021-12-06 23:46:06,479 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:46:06,479 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1452180289] [2021-12-06 23:46:06,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:46:06,479 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:46:06,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:46:06,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:06,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:06,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:46:06,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:06,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:06,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:46:06,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:06,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:06,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:46:06,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:06,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:06,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:46:06,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:06,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:46:06,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:06,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:06,726 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 23:46:06,727 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:46:06,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1452180289] [2021-12-06 23:46:06,727 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1452180289] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:46:06,727 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:46:06,727 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:46:06,727 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1682808298] [2021-12-06 23:46:06,727 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:46:06,728 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:46:06,728 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:46:06,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:46:06,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:46:06,728 INFO L87 Difference]: Start difference. First operand 5862 states and 8582 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:46:13,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:46:13,003 INFO L93 Difference]: Finished difference Result 6443 states and 9626 transitions. [2021-12-06 23:46:13,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:46:13,004 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 116 [2021-12-06 23:46:13,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:46:13,035 INFO L225 Difference]: With dead ends: 6443 [2021-12-06 23:46:13,035 INFO L226 Difference]: Without dead ends: 6411 [2021-12-06 23:46:13,041 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:46:13,042 INFO L933 BasicCegarLoop]: 2045 mSDtfsCounter, 3089 mSDsluCounter, 1486 mSDsCounter, 0 mSdLazyCounter, 1673 mSolverCounterSat, 1362 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3304 SdHoareTripleChecker+Valid, 3531 SdHoareTripleChecker+Invalid, 3035 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1362 IncrementalHoareTripleChecker+Valid, 1673 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:46:13,042 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3304 Valid, 3531 Invalid, 3035 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1362 Valid, 1673 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2021-12-06 23:46:13,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6411 states. [2021-12-06 23:46:13,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6411 to 5832. [2021-12-06 23:46:13,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5832 states, 4102 states have (on average 1.3922476840565579) internal successors, (5711), 4315 states have internal predecessors, (5711), 1363 states have call successors, (1363), 349 states have call predecessors, (1363), 366 states have return successors, (1463), 1273 states have call predecessors, (1463), 1361 states have call successors, (1463) [2021-12-06 23:46:13,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5832 states to 5832 states and 8537 transitions. [2021-12-06 23:46:13,254 INFO L78 Accepts]: Start accepts. Automaton has 5832 states and 8537 transitions. Word has length 116 [2021-12-06 23:46:13,255 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:46:13,255 INFO L470 AbstractCegarLoop]: Abstraction has 5832 states and 8537 transitions. [2021-12-06 23:46:13,255 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 23:46:13,255 INFO L276 IsEmpty]: Start isEmpty. Operand 5832 states and 8537 transitions. [2021-12-06 23:46:13,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 167 [2021-12-06 23:46:13,262 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:46:13,262 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:46:13,263 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 23:46:13,263 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:46:13,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:46:13,263 INFO L85 PathProgramCache]: Analyzing trace with hash -779411748, now seen corresponding path program 1 times [2021-12-06 23:46:13,263 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:46:13,263 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1422869460] [2021-12-06 23:46:13,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:46:13,263 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:46:13,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:46:13,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:13,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:13,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:46:13,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:13,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:13,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:46:13,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:13,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:13,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:46:13,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:13,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:13,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:46:13,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:13,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:46:13,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:13,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-06 23:46:13,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-06 23:46:13,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-06 23:46:13,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2021-12-06 23:46:13,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-06 23:46:13,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:13,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-12-06 23:46:13,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:13,540 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-12-06 23:46:13,540 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:46:13,541 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1422869460] [2021-12-06 23:46:13,541 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1422869460] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:46:13,541 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:46:13,541 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 23:46:13,541 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1928796061] [2021-12-06 23:46:13,541 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:46:13,541 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 23:46:13,541 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:46:13,542 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 23:46:13,542 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:46:13,542 INFO L87 Difference]: Start difference. First operand 5832 states and 8537 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 23:46:24,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:46:24,588 INFO L93 Difference]: Finished difference Result 20022 states and 30342 transitions. [2021-12-06 23:46:24,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 23:46:24,589 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 166 [2021-12-06 23:46:24,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:46:24,645 INFO L225 Difference]: With dead ends: 20022 [2021-12-06 23:46:24,645 INFO L226 Difference]: Without dead ends: 14213 [2021-12-06 23:46:24,678 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-12-06 23:46:24,679 INFO L933 BasicCegarLoop]: 2275 mSDtfsCounter, 7199 mSDsluCounter, 4834 mSDsCounter, 0 mSdLazyCounter, 5818 mSolverCounterSat, 5842 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7519 SdHoareTripleChecker+Valid, 7109 SdHoareTripleChecker+Invalid, 11660 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5842 IncrementalHoareTripleChecker+Valid, 5818 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.5s IncrementalHoareTripleChecker+Time [2021-12-06 23:46:24,679 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7519 Valid, 7109 Invalid, 11660 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5842 Valid, 5818 Invalid, 0 Unknown, 0 Unchecked, 10.5s Time] [2021-12-06 23:46:24,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14213 states. [2021-12-06 23:46:25,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14213 to 12528. [2021-12-06 23:46:25,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12528 states, 8714 states have (on average 1.3847831076428736) internal successors, (12067), 9225 states have internal predecessors, (12067), 2933 states have call successors, (2933), 677 states have call predecessors, (2933), 880 states have return successors, (3800), 2907 states have call predecessors, (3800), 2931 states have call successors, (3800) [2021-12-06 23:46:25,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12528 states to 12528 states and 18800 transitions. [2021-12-06 23:46:25,149 INFO L78 Accepts]: Start accepts. Automaton has 12528 states and 18800 transitions. Word has length 166 [2021-12-06 23:46:25,149 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:46:25,149 INFO L470 AbstractCegarLoop]: Abstraction has 12528 states and 18800 transitions. [2021-12-06 23:46:25,149 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 23:46:25,149 INFO L276 IsEmpty]: Start isEmpty. Operand 12528 states and 18800 transitions. [2021-12-06 23:46:25,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 205 [2021-12-06 23:46:25,164 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:46:25,164 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:46:25,164 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 23:46:25,164 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:46:25,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:46:25,164 INFO L85 PathProgramCache]: Analyzing trace with hash 2017075681, now seen corresponding path program 1 times [2021-12-06 23:46:25,164 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:46:25,164 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1882380913] [2021-12-06 23:46:25,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:46:25,165 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:46:25,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:46:25,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:25,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:25,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:46:25,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:25,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:25,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:46:25,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:25,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:25,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:46:25,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:25,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:25,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:46:25,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:25,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:46:25,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:25,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-06 23:46:25,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:25,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:25,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-06 23:46:25,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2021-12-06 23:46:25,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2021-12-06 23:46:25,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-12-06 23:46:25,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-06 23:46:25,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:25,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 172 [2021-12-06 23:46:25,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:25,468 INFO L134 CoverageAnalysis]: Checked inductivity of 182 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 165 trivial. 0 not checked. [2021-12-06 23:46:25,468 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:46:25,469 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1882380913] [2021-12-06 23:46:25,469 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1882380913] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:46:25,469 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:46:25,469 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 23:46:25,469 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [784434745] [2021-12-06 23:46:25,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:46:25,469 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 23:46:25,469 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:46:25,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 23:46:25,470 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:46:25,470 INFO L87 Difference]: Start difference. First operand 12528 states and 18800 transitions. Second operand has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 23:46:35,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:46:35,201 INFO L93 Difference]: Finished difference Result 29013 states and 44652 transitions. [2021-12-06 23:46:35,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-06 23:46:35,202 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 204 [2021-12-06 23:46:35,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:46:35,268 INFO L225 Difference]: With dead ends: 29013 [2021-12-06 23:46:35,269 INFO L226 Difference]: Without dead ends: 16508 [2021-12-06 23:46:35,303 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=225, Unknown=0, NotChecked=0, Total=306 [2021-12-06 23:46:35,304 INFO L933 BasicCegarLoop]: 2349 mSDtfsCounter, 5237 mSDsluCounter, 5579 mSDsCounter, 0 mSdLazyCounter, 4867 mSolverCounterSat, 3815 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5500 SdHoareTripleChecker+Valid, 7928 SdHoareTripleChecker+Invalid, 8682 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3815 IncrementalHoareTripleChecker+Valid, 4867 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:46:35,304 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5500 Valid, 7928 Invalid, 8682 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3815 Valid, 4867 Invalid, 0 Unknown, 0 Unchecked, 9.1s Time] [2021-12-06 23:46:35,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16508 states. [2021-12-06 23:46:35,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16508 to 12542. [2021-12-06 23:46:35,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12542 states, 8728 states have (on average 1.38416590284143) internal successors, (12081), 9239 states have internal predecessors, (12081), 2933 states have call successors, (2933), 677 states have call predecessors, (2933), 880 states have return successors, (3800), 2907 states have call predecessors, (3800), 2931 states have call successors, (3800) [2021-12-06 23:46:35,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12542 states to 12542 states and 18814 transitions. [2021-12-06 23:46:35,831 INFO L78 Accepts]: Start accepts. Automaton has 12542 states and 18814 transitions. Word has length 204 [2021-12-06 23:46:35,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:46:35,832 INFO L470 AbstractCegarLoop]: Abstraction has 12542 states and 18814 transitions. [2021-12-06 23:46:35,832 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 23:46:35,832 INFO L276 IsEmpty]: Start isEmpty. Operand 12542 states and 18814 transitions. [2021-12-06 23:46:35,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 222 [2021-12-06 23:46:35,860 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:46:35,861 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:46:35,861 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 23:46:35,861 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:46:35,861 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:46:35,861 INFO L85 PathProgramCache]: Analyzing trace with hash 669285560, now seen corresponding path program 1 times [2021-12-06 23:46:35,861 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:46:35,861 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [485149115] [2021-12-06 23:46:35,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:46:35,862 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:46:35,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:35,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:46:35,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:35,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:35,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:35,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:35,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:46:36,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:36,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:36,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:46:36,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:36,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:36,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:46:36,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:36,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:36,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:46:36,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:36,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:46:36,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:36,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-06 23:46:36,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:36,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:36,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-06 23:46:36,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:36,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:36,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-06 23:46:36,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-12-06 23:46:36,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-12-06 23:46:36,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-06 23:46:36,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-06 23:46:36,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:36,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-12-06 23:46:36,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:36,188 INFO L134 CoverageAnalysis]: Checked inductivity of 252 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 234 trivial. 0 not checked. [2021-12-06 23:46:36,189 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:46:36,189 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [485149115] [2021-12-06 23:46:36,189 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [485149115] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:46:36,189 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:46:36,189 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 23:46:36,189 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [229274366] [2021-12-06 23:46:36,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:46:36,190 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 23:46:36,190 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:46:36,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 23:46:36,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:46:36,191 INFO L87 Difference]: Start difference. First operand 12542 states and 18814 transitions. Second operand has 8 states, 8 states have (on average 12.875) internal successors, (103), 3 states have internal predecessors, (103), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 23:46:55,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:46:55,623 INFO L93 Difference]: Finished difference Result 40379 states and 61522 transitions. [2021-12-06 23:46:55,623 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 23:46:55,624 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.875) internal successors, (103), 3 states have internal predecessors, (103), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 221 [2021-12-06 23:46:55,624 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:46:55,721 INFO L225 Difference]: With dead ends: 40379 [2021-12-06 23:46:55,721 INFO L226 Difference]: Without dead ends: 27860 [2021-12-06 23:46:55,770 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-12-06 23:46:55,770 INFO L933 BasicCegarLoop]: 3465 mSDtfsCounter, 4862 mSDsluCounter, 7132 mSDsCounter, 0 mSdLazyCounter, 8574 mSolverCounterSat, 4345 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 17.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5223 SdHoareTripleChecker+Valid, 10597 SdHoareTripleChecker+Invalid, 12919 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4345 IncrementalHoareTripleChecker+Valid, 8574 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 18.5s IncrementalHoareTripleChecker+Time [2021-12-06 23:46:55,771 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5223 Valid, 10597 Invalid, 12919 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4345 Valid, 8574 Invalid, 0 Unknown, 0 Unchecked, 18.5s Time] [2021-12-06 23:46:55,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27860 states. [2021-12-06 23:46:56,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27860 to 24607. [2021-12-06 23:46:56,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24607 states, 17148 states have (on average 1.3852927455096804) internal successors, (23755), 18149 states have internal predecessors, (23755), 5723 states have call successors, (5723), 1328 states have call predecessors, (5723), 1735 states have return successors, (7451), 5673 states have call predecessors, (7451), 5721 states have call successors, (7451) [2021-12-06 23:46:56,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24607 states to 24607 states and 36929 transitions. [2021-12-06 23:46:56,695 INFO L78 Accepts]: Start accepts. Automaton has 24607 states and 36929 transitions. Word has length 221 [2021-12-06 23:46:56,695 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:46:56,695 INFO L470 AbstractCegarLoop]: Abstraction has 24607 states and 36929 transitions. [2021-12-06 23:46:56,695 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.875) internal successors, (103), 3 states have internal predecessors, (103), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 23:46:56,695 INFO L276 IsEmpty]: Start isEmpty. Operand 24607 states and 36929 transitions. [2021-12-06 23:46:56,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 248 [2021-12-06 23:46:56,726 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:46:56,727 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:46:56,727 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 23:46:56,727 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:46:56,727 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:46:56,727 INFO L85 PathProgramCache]: Analyzing trace with hash 1675118902, now seen corresponding path program 1 times [2021-12-06 23:46:56,727 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:46:56,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1291765409] [2021-12-06 23:46:56,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:46:56,727 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:46:56,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:46:56,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:56,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:56,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:46:56,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:56,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:56,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:46:56,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:56,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:56,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:46:56,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:56,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:56,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:46:56,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:56,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:46:56,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:56,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-06 23:46:56,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:56,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:46:56,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2021-12-06 23:46:56,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-12-06 23:46:56,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2021-12-06 23:46:56,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:56,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2021-12-06 23:46:56,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-12-06 23:46:57,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2021-12-06 23:46:57,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-06 23:46:57,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-12-06 23:46:57,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2021-12-06 23:46:57,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-12-06 23:46:57,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2021-12-06 23:46:57,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:46:57,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 215 [2021-12-06 23:46:57,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:46:57,066 INFO L134 CoverageAnalysis]: Checked inductivity of 213 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 194 trivial. 0 not checked. [2021-12-06 23:46:57,067 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:46:57,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1291765409] [2021-12-06 23:46:57,067 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1291765409] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:46:57,067 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:46:57,067 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 23:46:57,067 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1731328796] [2021-12-06 23:46:57,067 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:46:57,068 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 23:46:57,068 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:46:57,068 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 23:46:57,068 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:46:57,068 INFO L87 Difference]: Start difference. First operand 24607 states and 36929 transitions. Second operand has 9 states, 9 states have (on average 12.88888888888889) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-12-06 23:47:08,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:47:08,819 INFO L93 Difference]: Finished difference Result 42152 states and 63753 transitions. [2021-12-06 23:47:08,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-06 23:47:08,820 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 12.88888888888889) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 247 [2021-12-06 23:47:08,820 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:47:08,898 INFO L225 Difference]: With dead ends: 42152 [2021-12-06 23:47:08,898 INFO L226 Difference]: Without dead ends: 17576 [2021-12-06 23:47:08,962 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=118, Unknown=0, NotChecked=0, Total=182 [2021-12-06 23:47:08,962 INFO L933 BasicCegarLoop]: 1993 mSDtfsCounter, 2394 mSDsluCounter, 4116 mSDsCounter, 0 mSdLazyCounter, 4871 mSolverCounterSat, 2172 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2534 SdHoareTripleChecker+Valid, 6109 SdHoareTripleChecker+Invalid, 7043 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2172 IncrementalHoareTripleChecker+Valid, 4871 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.8s IncrementalHoareTripleChecker+Time [2021-12-06 23:47:08,962 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2534 Valid, 6109 Invalid, 7043 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2172 Valid, 4871 Invalid, 0 Unknown, 0 Unchecked, 10.8s Time] [2021-12-06 23:47:08,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17576 states. [2021-12-06 23:47:09,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17576 to 15464. [2021-12-06 23:47:09,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15464 states, 10750 states have (on average 1.3809302325581396) internal successors, (14845), 11382 states have internal predecessors, (14845), 3599 states have call successors, (3599), 860 states have call predecessors, (3599), 1114 states have return successors, (4672), 3565 states have call predecessors, (4672), 3597 states have call successors, (4672) [2021-12-06 23:47:09,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15464 states to 15464 states and 23116 transitions. [2021-12-06 23:47:09,690 INFO L78 Accepts]: Start accepts. Automaton has 15464 states and 23116 transitions. Word has length 247 [2021-12-06 23:47:09,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:47:09,691 INFO L470 AbstractCegarLoop]: Abstraction has 15464 states and 23116 transitions. [2021-12-06 23:47:09,691 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 12.88888888888889) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-12-06 23:47:09,691 INFO L276 IsEmpty]: Start isEmpty. Operand 15464 states and 23116 transitions. [2021-12-06 23:47:09,723 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 283 [2021-12-06 23:47:09,723 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:47:09,724 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:47:09,724 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 23:47:09,724 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:47:09,724 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:47:09,724 INFO L85 PathProgramCache]: Analyzing trace with hash -535877291, now seen corresponding path program 1 times [2021-12-06 23:47:09,724 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:47:09,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820019354] [2021-12-06 23:47:09,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:47:09,724 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:47:09,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:47:09,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:09,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:09,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:47:09,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:09,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:09,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:47:09,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:09,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:09,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:47:09,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:09,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:09,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:47:09,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:09,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:09,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:47:09,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:10,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-06 23:47:10,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:47:10,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:10,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:10,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:47:10,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 23:47:10,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 23:47:10,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:10,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 23:47:10,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:10,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:47:10,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:10,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:10,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:10,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 23:47:10,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-06 23:47:10,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-06 23:47:10,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 23:47:10,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 23:47:10,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:10,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:10,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:10,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 23:47:10,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 23:47:10,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 23:47:10,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:10,282 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-06 23:47:10,282 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:47:10,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820019354] [2021-12-06 23:47:10,283 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1820019354] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:47:10,283 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:47:10,283 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 23:47:10,283 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1053911764] [2021-12-06 23:47:10,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:47:10,284 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 23:47:10,284 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:47:10,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 23:47:10,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-06 23:47:10,284 INFO L87 Difference]: Start difference. First operand 15464 states and 23116 transitions. Second operand has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:47:19,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:47:19,389 INFO L93 Difference]: Finished difference Result 33015 states and 49933 transitions. [2021-12-06 23:47:19,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 23:47:19,390 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 282 [2021-12-06 23:47:19,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:47:19,440 INFO L225 Difference]: With dead ends: 33015 [2021-12-06 23:47:19,440 INFO L226 Difference]: Without dead ends: 17584 [2021-12-06 23:47:19,469 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-06 23:47:19,469 INFO L933 BasicCegarLoop]: 1860 mSDtfsCounter, 6545 mSDsluCounter, 3394 mSDsCounter, 0 mSdLazyCounter, 5288 mSolverCounterSat, 5269 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6821 SdHoareTripleChecker+Valid, 5254 SdHoareTripleChecker+Invalid, 10557 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5269 IncrementalHoareTripleChecker+Valid, 5288 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:47:19,469 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6821 Valid, 5254 Invalid, 10557 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5269 Valid, 5288 Invalid, 0 Unknown, 0 Unchecked, 8.1s Time] [2021-12-06 23:47:19,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17584 states. [2021-12-06 23:47:20,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17584 to 15444. [2021-12-06 23:47:20,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15444 states, 10740 states have (on average 1.3803538175046555) internal successors, (14825), 11372 states have internal predecessors, (14825), 3589 states have call successors, (3589), 860 states have call predecessors, (3589), 1114 states have return successors, (4642), 3555 states have call predecessors, (4642), 3587 states have call successors, (4642) [2021-12-06 23:47:20,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15444 states to 15444 states and 23056 transitions. [2021-12-06 23:47:20,253 INFO L78 Accepts]: Start accepts. Automaton has 15444 states and 23056 transitions. Word has length 282 [2021-12-06 23:47:20,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:47:20,253 INFO L470 AbstractCegarLoop]: Abstraction has 15444 states and 23056 transitions. [2021-12-06 23:47:20,253 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:47:20,254 INFO L276 IsEmpty]: Start isEmpty. Operand 15444 states and 23056 transitions. [2021-12-06 23:47:20,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 284 [2021-12-06 23:47:20,282 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:47:20,283 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:47:20,283 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-06 23:47:20,283 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:47:20,283 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:47:20,283 INFO L85 PathProgramCache]: Analyzing trace with hash -472580315, now seen corresponding path program 1 times [2021-12-06 23:47:20,284 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:47:20,284 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1459824812] [2021-12-06 23:47:20,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:47:20,284 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:47:20,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:47:20,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:20,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:47:20,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:20,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:47:20,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:20,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:47:20,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:20,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:47:20,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:47:20,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 23:47:20,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:47:20,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:20,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:20,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:47:20,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 23:47:20,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 23:47:20,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 23:47:20,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:20,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:47:20,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:20,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 23:47:20,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-06 23:47:20,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-06 23:47:20,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 23:47:20,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 23:47:20,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:20,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:20,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 23:47:20,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 23:47:20,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 23:47:20,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:20,812 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-06 23:47:20,812 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:47:20,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1459824812] [2021-12-06 23:47:20,812 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1459824812] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:47:20,812 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:47:20,813 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 23:47:20,813 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1408928248] [2021-12-06 23:47:20,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:47:20,813 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 23:47:20,813 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:47:20,814 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 23:47:20,814 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-06 23:47:20,814 INFO L87 Difference]: Start difference. First operand 15444 states and 23056 transitions. Second operand has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:47:34,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:47:34,694 INFO L93 Difference]: Finished difference Result 32975 states and 49808 transitions. [2021-12-06 23:47:34,695 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 23:47:34,695 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 283 [2021-12-06 23:47:34,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:47:34,745 INFO L225 Difference]: With dead ends: 32975 [2021-12-06 23:47:34,745 INFO L226 Difference]: Without dead ends: 17564 [2021-12-06 23:47:34,774 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-06 23:47:34,775 INFO L933 BasicCegarLoop]: 1873 mSDtfsCounter, 5752 mSDsluCounter, 4136 mSDsCounter, 0 mSdLazyCounter, 5861 mSolverCounterSat, 4584 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6028 SdHoareTripleChecker+Valid, 6009 SdHoareTripleChecker+Invalid, 10445 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4584 IncrementalHoareTripleChecker+Valid, 5861 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.8s IncrementalHoareTripleChecker+Time [2021-12-06 23:47:34,775 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6028 Valid, 6009 Invalid, 10445 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4584 Valid, 5861 Invalid, 0 Unknown, 0 Unchecked, 12.8s Time] [2021-12-06 23:47:34,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17564 states. [2021-12-06 23:47:35,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17564 to 15424. [2021-12-06 23:47:35,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15424 states, 10730 states have (on average 1.3797763280521902) internal successors, (14805), 11362 states have internal predecessors, (14805), 3579 states have call successors, (3579), 860 states have call predecessors, (3579), 1114 states have return successors, (4612), 3545 states have call predecessors, (4612), 3577 states have call successors, (4612) [2021-12-06 23:47:35,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15424 states to 15424 states and 22996 transitions. [2021-12-06 23:47:35,545 INFO L78 Accepts]: Start accepts. Automaton has 15424 states and 22996 transitions. Word has length 283 [2021-12-06 23:47:35,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:47:35,545 INFO L470 AbstractCegarLoop]: Abstraction has 15424 states and 22996 transitions. [2021-12-06 23:47:35,545 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:47:35,545 INFO L276 IsEmpty]: Start isEmpty. Operand 15424 states and 22996 transitions. [2021-12-06 23:47:35,566 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 281 [2021-12-06 23:47:35,566 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:47:35,566 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:47:35,567 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-06 23:47:35,567 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:47:35,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:47:35,567 INFO L85 PathProgramCache]: Analyzing trace with hash -661611690, now seen corresponding path program 1 times [2021-12-06 23:47:35,567 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:47:35,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016817908] [2021-12-06 23:47:35,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:47:35,567 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:47:35,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:47:35,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:35,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:35,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:47:35,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:35,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:35,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:47:35,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:35,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:35,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:47:35,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:35,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:35,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:47:35,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:35,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:47:35,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:35,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-06 23:47:35,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:47:35,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:35,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:35,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:47:35,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 23:47:35,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 23:47:35,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:35,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 23:47:35,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:35,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:35,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:47:35,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:36,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:36,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:36,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 23:47:36,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-06 23:47:36,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-06 23:47:36,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 23:47:36,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 23:47:36,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:36,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:36,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:36,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 23:47:36,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 23:47:36,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 23:47:36,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:36,073 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-06 23:47:36,073 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:47:36,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016817908] [2021-12-06 23:47:36,073 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2016817908] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:47:36,073 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:47:36,073 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 23:47:36,074 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2128458129] [2021-12-06 23:47:36,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:47:36,074 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 23:47:36,074 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:47:36,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 23:47:36,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-06 23:47:36,075 INFO L87 Difference]: Start difference. First operand 15424 states and 22996 transitions. Second operand has 13 states, 13 states have (on average 12.0) internal successors, (156), 5 states have internal predecessors, (156), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:47:51,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:47:51,600 INFO L93 Difference]: Finished difference Result 32935 states and 49683 transitions. [2021-12-06 23:47:51,600 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 23:47:51,600 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.0) internal successors, (156), 5 states have internal predecessors, (156), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 280 [2021-12-06 23:47:51,601 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:47:51,653 INFO L225 Difference]: With dead ends: 32935 [2021-12-06 23:47:51,653 INFO L226 Difference]: Without dead ends: 17544 [2021-12-06 23:47:51,682 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-06 23:47:51,683 INFO L933 BasicCegarLoop]: 1861 mSDtfsCounter, 5168 mSDsluCounter, 4348 mSDsCounter, 0 mSdLazyCounter, 6511 mSolverCounterSat, 3968 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5438 SdHoareTripleChecker+Valid, 6209 SdHoareTripleChecker+Invalid, 10479 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3968 IncrementalHoareTripleChecker+Valid, 6511 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.4s IncrementalHoareTripleChecker+Time [2021-12-06 23:47:51,683 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5438 Valid, 6209 Invalid, 10479 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3968 Valid, 6511 Invalid, 0 Unknown, 0 Unchecked, 14.4s Time] [2021-12-06 23:47:51,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17544 states. [2021-12-06 23:47:52,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17544 to 15404. [2021-12-06 23:47:52,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15404 states, 10720 states have (on average 1.3791977611940298) internal successors, (14785), 11352 states have internal predecessors, (14785), 3569 states have call successors, (3569), 860 states have call predecessors, (3569), 1114 states have return successors, (4582), 3535 states have call predecessors, (4582), 3567 states have call successors, (4582) [2021-12-06 23:47:52,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15404 states to 15404 states and 22936 transitions. [2021-12-06 23:47:52,503 INFO L78 Accepts]: Start accepts. Automaton has 15404 states and 22936 transitions. Word has length 280 [2021-12-06 23:47:52,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:47:52,503 INFO L470 AbstractCegarLoop]: Abstraction has 15404 states and 22936 transitions. [2021-12-06 23:47:52,503 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.0) internal successors, (156), 5 states have internal predecessors, (156), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:47:52,503 INFO L276 IsEmpty]: Start isEmpty. Operand 15404 states and 22936 transitions. [2021-12-06 23:47:52,523 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 282 [2021-12-06 23:47:52,524 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:47:52,524 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:47:52,524 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-12-06 23:47:52,524 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:47:52,524 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:47:52,524 INFO L85 PathProgramCache]: Analyzing trace with hash 1923689798, now seen corresponding path program 1 times [2021-12-06 23:47:52,524 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:47:52,525 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1950538210] [2021-12-06 23:47:52,525 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:47:52,525 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:47:52,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:47:52,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:52,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:47:52,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:52,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:47:52,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:52,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:47:52,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:52,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:47:52,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:47:52,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-12-06 23:47:52,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:47:52,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:52,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:52,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:47:52,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 23:47:52,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 23:47:52,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 23:47:52,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:52,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:47:52,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:47:52,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 23:47:52,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-06 23:47:52,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-06 23:47:52,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 23:47:52,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 23:47:52,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:47:52,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:47:52,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 23:47:52,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 23:47:52,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 23:47:52,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:47:52,952 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-06 23:47:52,952 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:47:52,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1950538210] [2021-12-06 23:47:52,952 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1950538210] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:47:52,952 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:47:52,952 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 23:47:52,952 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1292232696] [2021-12-06 23:47:52,953 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:47:52,953 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 23:47:52,953 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:47:52,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 23:47:52,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-06 23:47:52,954 INFO L87 Difference]: Start difference. First operand 15404 states and 22936 transitions. Second operand has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:48:08,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:48:08,240 INFO L93 Difference]: Finished difference Result 32895 states and 49558 transitions. [2021-12-06 23:48:08,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 23:48:08,242 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 281 [2021-12-06 23:48:08,242 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:48:08,288 INFO L225 Difference]: With dead ends: 32895 [2021-12-06 23:48:08,288 INFO L226 Difference]: Without dead ends: 17524 [2021-12-06 23:48:08,315 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-06 23:48:08,315 INFO L933 BasicCegarLoop]: 1912 mSDtfsCounter, 3442 mSDsluCounter, 4788 mSDsCounter, 0 mSdLazyCounter, 7738 mSolverCounterSat, 2276 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3706 SdHoareTripleChecker+Valid, 6700 SdHoareTripleChecker+Invalid, 10014 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2276 IncrementalHoareTripleChecker+Valid, 7738 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:48:08,316 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3706 Valid, 6700 Invalid, 10014 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2276 Valid, 7738 Invalid, 0 Unknown, 0 Unchecked, 14.1s Time] [2021-12-06 23:48:08,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17524 states. [2021-12-06 23:48:09,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17524 to 15384. [2021-12-06 23:48:09,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15384 states, 10710 states have (on average 1.3786181139122315) internal successors, (14765), 11342 states have internal predecessors, (14765), 3559 states have call successors, (3559), 860 states have call predecessors, (3559), 1114 states have return successors, (4552), 3525 states have call predecessors, (4552), 3557 states have call successors, (4552) [2021-12-06 23:48:09,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15384 states to 15384 states and 22876 transitions. [2021-12-06 23:48:09,170 INFO L78 Accepts]: Start accepts. Automaton has 15384 states and 22876 transitions. Word has length 281 [2021-12-06 23:48:09,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:48:09,170 INFO L470 AbstractCegarLoop]: Abstraction has 15384 states and 22876 transitions. [2021-12-06 23:48:09,171 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:48:09,171 INFO L276 IsEmpty]: Start isEmpty. Operand 15384 states and 22876 transitions. [2021-12-06 23:48:09,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 297 [2021-12-06 23:48:09,183 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:48:09,184 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:48:09,184 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-12-06 23:48:09,184 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:48:09,184 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:48:09,185 INFO L85 PathProgramCache]: Analyzing trace with hash 790150926, now seen corresponding path program 1 times [2021-12-06 23:48:09,185 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:48:09,185 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2133115786] [2021-12-06 23:48:09,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:48:09,185 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:48:09,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,295 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:48:09,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:09,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:09,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:48:09,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:09,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:09,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:48:09,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:09,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:09,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:48:09,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:09,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:09,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:48:09,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:09,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:48:09,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:09,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-06 23:48:09,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:09,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:09,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-06 23:48:09,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:09,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:09,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-06 23:48:09,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-12-06 23:48:09,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-12-06 23:48:09,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-06 23:48:09,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-06 23:48:09,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:09,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-12-06 23:48:09,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 213 [2021-12-06 23:48:09,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-12-06 23:48:09,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 226 [2021-12-06 23:48:09,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-12-06 23:48:09,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 239 [2021-12-06 23:48:09,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-12-06 23:48:09,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 252 [2021-12-06 23:48:09,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-12-06 23:48:09,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2021-12-06 23:48:09,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-12-06 23:48:09,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 278 [2021-12-06 23:48:09,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-12-06 23:48:09,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,483 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 357 trivial. 0 not checked. [2021-12-06 23:48:09,483 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:48:09,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2133115786] [2021-12-06 23:48:09,484 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2133115786] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 23:48:09,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1172323853] [2021-12-06 23:48:09,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:48:09,484 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:48:09,484 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:48:09,485 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 23:48:09,486 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 23:48:09,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:09,966 INFO L263 TraceCheckSpWp]: Trace formula consists of 2899 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 23:48:09,979 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:48:10,222 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 357 trivial. 0 not checked. [2021-12-06 23:48:10,222 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:48:10,222 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1172323853] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:48:10,222 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 23:48:10,222 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-12-06 23:48:10,222 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [119065559] [2021-12-06 23:48:10,222 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:48:10,223 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:48:10,223 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:48:10,223 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:48:10,223 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2021-12-06 23:48:10,224 INFO L87 Difference]: Start difference. First operand 15384 states and 22876 transitions. Second operand has 5 states, 5 states have (on average 23.2) internal successors, (116), 5 states have internal predecessors, (116), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-12-06 23:48:11,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:48:11,617 INFO L93 Difference]: Finished difference Result 27882 states and 41542 transitions. [2021-12-06 23:48:11,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:48:11,617 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 5 states have internal predecessors, (116), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 296 [2021-12-06 23:48:11,618 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:48:11,667 INFO L225 Difference]: With dead ends: 27882 [2021-12-06 23:48:11,668 INFO L226 Difference]: Without dead ends: 21655 [2021-12-06 23:48:11,681 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 386 GetRequests, 372 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=196, Unknown=0, NotChecked=0, Total=240 [2021-12-06 23:48:11,682 INFO L933 BasicCegarLoop]: 4291 mSDtfsCounter, 2798 mSDsluCounter, 10019 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 239 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2820 SdHoareTripleChecker+Valid, 14310 SdHoareTripleChecker+Invalid, 391 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 239 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 23:48:11,682 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2820 Valid, 14310 Invalid, 391 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [239 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 23:48:11,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21655 states. [2021-12-06 23:48:12,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21655 to 15408. [2021-12-06 23:48:12,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15408 states, 10724 states have (on average 1.378123834390153) internal successors, (14779), 11358 states have internal predecessors, (14779), 3569 states have call successors, (3569), 860 states have call predecessors, (3569), 1114 states have return successors, (4564), 3535 states have call predecessors, (4564), 3567 states have call successors, (4564) [2021-12-06 23:48:12,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15408 states to 15408 states and 22912 transitions. [2021-12-06 23:48:12,589 INFO L78 Accepts]: Start accepts. Automaton has 15408 states and 22912 transitions. Word has length 296 [2021-12-06 23:48:12,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:48:12,590 INFO L470 AbstractCegarLoop]: Abstraction has 15408 states and 22912 transitions. [2021-12-06 23:48:12,590 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 5 states have internal predecessors, (116), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-12-06 23:48:12,590 INFO L276 IsEmpty]: Start isEmpty. Operand 15408 states and 22912 transitions. [2021-12-06 23:48:12,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 297 [2021-12-06 23:48:12,603 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:48:12,603 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:48:12,627 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 23:48:12,803 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:48:12,805 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:48:12,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:48:12,806 INFO L85 PathProgramCache]: Analyzing trace with hash -1903745264, now seen corresponding path program 1 times [2021-12-06 23:48:12,806 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:48:12,807 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2113895135] [2021-12-06 23:48:12,807 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:48:12,808 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:48:12,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:48:13,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:13,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:13,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:48:13,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:13,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:13,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:48:13,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:13,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:13,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:48:13,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:13,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:13,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:48:13,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:13,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 23:48:13,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:13,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-06 23:48:13,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:13,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:13,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-06 23:48:13,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:13,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:13,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-06 23:48:13,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-12-06 23:48:13,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-12-06 23:48:13,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-06 23:48:13,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-06 23:48:13,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:13,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-12-06 23:48:13,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 213 [2021-12-06 23:48:13,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-12-06 23:48:13,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 226 [2021-12-06 23:48:13,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-12-06 23:48:13,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 239 [2021-12-06 23:48:13,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-12-06 23:48:13,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 252 [2021-12-06 23:48:13,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-12-06 23:48:13,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2021-12-06 23:48:13,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-12-06 23:48:13,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 278 [2021-12-06 23:48:13,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-12-06 23:48:13,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,346 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 12 proven. 2 refuted. 0 times theorem prover too weak. 355 trivial. 0 not checked. [2021-12-06 23:48:13,346 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:48:13,346 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2113895135] [2021-12-06 23:48:13,346 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2113895135] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 23:48:13,346 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1882550491] [2021-12-06 23:48:13,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:48:13,347 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:48:13,347 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:48:13,347 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 23:48:13,348 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-06 23:48:13,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:13,969 INFO L263 TraceCheckSpWp]: Trace formula consists of 2894 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-06 23:48:13,976 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:48:14,235 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 121 proven. 0 refuted. 0 times theorem prover too weak. 248 trivial. 0 not checked. [2021-12-06 23:48:14,235 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:48:14,235 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1882550491] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:48:14,235 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 23:48:14,235 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2021-12-06 23:48:14,235 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1624999428] [2021-12-06 23:48:14,235 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:48:14,236 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:48:14,236 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:48:14,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:48:14,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-12-06 23:48:14,237 INFO L87 Difference]: Start difference. First operand 15408 states and 22912 transitions. Second operand has 6 states, 5 states have (on average 24.4) internal successors, (122), 6 states have internal predecessors, (122), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-12-06 23:48:15,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:48:15,203 INFO L93 Difference]: Finished difference Result 30827 states and 45872 transitions. [2021-12-06 23:48:15,203 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:48:15,204 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.4) internal successors, (122), 6 states have internal predecessors, (122), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) Word has length 296 [2021-12-06 23:48:15,204 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:48:15,245 INFO L225 Difference]: With dead ends: 30827 [2021-12-06 23:48:15,245 INFO L226 Difference]: Without dead ends: 15438 [2021-12-06 23:48:15,271 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 384 GetRequests, 369 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=231, Unknown=0, NotChecked=0, Total=272 [2021-12-06 23:48:15,271 INFO L933 BasicCegarLoop]: 2236 mSDtfsCounter, 6 mSDsluCounter, 8930 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11166 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:48:15,271 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11166 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:48:15,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15438 states. [2021-12-06 23:48:16,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15438 to 15411. [2021-12-06 23:48:16,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15411 states, 10726 states have (on average 1.3781465597613276) internal successors, (14782), 11361 states have internal predecessors, (14782), 3569 states have call successors, (3569), 860 states have call predecessors, (3569), 1115 states have return successors, (4568), 3535 states have call predecessors, (4568), 3567 states have call successors, (4568) [2021-12-06 23:48:16,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15411 states to 15411 states and 22919 transitions. [2021-12-06 23:48:16,223 INFO L78 Accepts]: Start accepts. Automaton has 15411 states and 22919 transitions. Word has length 296 [2021-12-06 23:48:16,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:48:16,223 INFO L470 AbstractCegarLoop]: Abstraction has 15411 states and 22919 transitions. [2021-12-06 23:48:16,223 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.4) internal successors, (122), 6 states have internal predecessors, (122), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-12-06 23:48:16,223 INFO L276 IsEmpty]: Start isEmpty. Operand 15411 states and 22919 transitions. [2021-12-06 23:48:16,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 299 [2021-12-06 23:48:16,241 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:48:16,241 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:48:16,265 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-06 23:48:16,442 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2021-12-06 23:48:16,443 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:48:16,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:48:16,445 INFO L85 PathProgramCache]: Analyzing trace with hash -442570164, now seen corresponding path program 1 times [2021-12-06 23:48:16,445 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:48:16,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [766151712] [2021-12-06 23:48:16,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:48:16,446 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:48:16,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:48:16,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:16,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:16,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:48:16,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:16,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:16,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:48:16,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:16,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:16,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:48:16,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:16,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:16,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:48:16,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:16,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-06 23:48:16,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:16,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-12-06 23:48:16,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:16,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:16,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 131 [2021-12-06 23:48:16,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:16,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:16,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2021-12-06 23:48:16,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 165 [2021-12-06 23:48:16,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2021-12-06 23:48:16,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-06 23:48:16,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-06 23:48:16,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:16,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-12-06 23:48:16,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 215 [2021-12-06 23:48:16,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 219 [2021-12-06 23:48:16,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 228 [2021-12-06 23:48:16,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 232 [2021-12-06 23:48:16,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 241 [2021-12-06 23:48:16,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 245 [2021-12-06 23:48:16,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 254 [2021-12-06 23:48:16,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 258 [2021-12-06 23:48:16,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 267 [2021-12-06 23:48:16,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2021-12-06 23:48:16,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 280 [2021-12-06 23:48:16,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 284 [2021-12-06 23:48:16,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:16,867 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 12 proven. 2 refuted. 0 times theorem prover too weak. 360 trivial. 0 not checked. [2021-12-06 23:48:16,867 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:48:16,867 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [766151712] [2021-12-06 23:48:16,867 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [766151712] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 23:48:16,867 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [901697376] [2021-12-06 23:48:16,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:48:16,868 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:48:16,868 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:48:16,868 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 23:48:16,869 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-06 23:48:17,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:17,447 INFO L263 TraceCheckSpWp]: Trace formula consists of 2924 conjuncts, 18 conjunts are in the unsatisfiable core [2021-12-06 23:48:17,454 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:48:17,710 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 124 proven. 1 refuted. 0 times theorem prover too weak. 249 trivial. 0 not checked. [2021-12-06 23:48:17,710 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 23:48:18,161 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 363 trivial. 0 not checked. [2021-12-06 23:48:18,162 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [901697376] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 23:48:18,162 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 23:48:18,162 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 7, 7] total 20 [2021-12-06 23:48:18,162 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [133634161] [2021-12-06 23:48:18,162 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 23:48:18,163 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-12-06 23:48:18,163 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:48:18,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-12-06 23:48:18,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2021-12-06 23:48:18,164 INFO L87 Difference]: Start difference. First operand 15411 states and 22919 transitions. Second operand has 20 states, 18 states have (on average 11.333333333333334) internal successors, (204), 13 states have internal predecessors, (204), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 23:48:39,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:48:39,709 INFO L93 Difference]: Finished difference Result 32951 states and 49660 transitions. [2021-12-06 23:48:39,712 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-06 23:48:39,712 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 18 states have (on average 11.333333333333334) internal successors, (204), 13 states have internal predecessors, (204), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) Word has length 298 [2021-12-06 23:48:39,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:48:39,765 INFO L225 Difference]: With dead ends: 32951 [2021-12-06 23:48:39,765 INFO L226 Difference]: Without dead ends: 17559 [2021-12-06 23:48:39,793 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 697 GetRequests, 666 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 138 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=180, Invalid=876, Unknown=0, NotChecked=0, Total=1056 [2021-12-06 23:48:39,794 INFO L933 BasicCegarLoop]: 2027 mSDtfsCounter, 2402 mSDsluCounter, 17535 mSDsCounter, 0 mSdLazyCounter, 14730 mSolverCounterSat, 2148 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2550 SdHoareTripleChecker+Valid, 19562 SdHoareTripleChecker+Invalid, 16878 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2148 IncrementalHoareTripleChecker+Valid, 14730 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:48:39,794 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2550 Valid, 19562 Invalid, 16878 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2148 Valid, 14730 Invalid, 0 Unknown, 0 Unchecked, 20.0s Time] [2021-12-06 23:48:39,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17559 states. [2021-12-06 23:48:40,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17559 to 15424. [2021-12-06 23:48:40,677 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15424 states, 10737 states have (on average 1.377852286485983) internal successors, (14794), 11370 states have internal predecessors, (14794), 3569 states have call successors, (3569), 860 states have call predecessors, (3569), 1117 states have return successors, (4577), 3539 states have call predecessors, (4577), 3567 states have call successors, (4577) [2021-12-06 23:48:40,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15424 states to 15424 states and 22940 transitions. [2021-12-06 23:48:40,723 INFO L78 Accepts]: Start accepts. Automaton has 15424 states and 22940 transitions. Word has length 298 [2021-12-06 23:48:40,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:48:40,723 INFO L470 AbstractCegarLoop]: Abstraction has 15424 states and 22940 transitions. [2021-12-06 23:48:40,723 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 18 states have (on average 11.333333333333334) internal successors, (204), 13 states have internal predecessors, (204), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 23:48:40,723 INFO L276 IsEmpty]: Start isEmpty. Operand 15424 states and 22940 transitions. [2021-12-06 23:48:40,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 307 [2021-12-06 23:48:40,739 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:48:40,739 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:48:40,763 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-12-06 23:48:40,940 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2021-12-06 23:48:40,941 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:48:40,941 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:48:40,942 INFO L85 PathProgramCache]: Analyzing trace with hash -380056710, now seen corresponding path program 1 times [2021-12-06 23:48:40,942 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:48:40,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1235272932] [2021-12-06 23:48:40,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:48:40,943 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:48:41,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:48:41,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:41,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:41,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:48:41,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:41,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:41,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:48:41,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:41,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:41,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:48:41,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:41,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:41,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:48:41,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:41,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-06 23:48:41,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:41,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-06 23:48:41,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:41,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:41,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-12-06 23:48:41,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:41,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:48:41,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-12-06 23:48:41,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:48:41,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-06 23:48:41,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-06 23:48:41,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-06 23:48:41,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-12-06 23:48:41,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:48:41,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-12-06 23:48:41,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 223 [2021-12-06 23:48:41,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-12-06 23:48:41,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-12-06 23:48:41,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-12-06 23:48:41,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2021-12-06 23:48:41,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-12-06 23:48:41,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 262 [2021-12-06 23:48:41,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-12-06 23:48:41,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 275 [2021-12-06 23:48:41,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-12-06 23:48:41,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 288 [2021-12-06 23:48:41,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-12-06 23:48:41,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:48:41,428 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 393 trivial. 0 not checked. [2021-12-06 23:48:41,428 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:48:41,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1235272932] [2021-12-06 23:48:41,428 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1235272932] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:48:41,428 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:48:41,428 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2021-12-06 23:48:41,428 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [924899999] [2021-12-06 23:48:41,428 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:48:41,429 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-06 23:48:41,429 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:48:41,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-06 23:48:41,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-12-06 23:48:41,429 INFO L87 Difference]: Start difference. First operand 15424 states and 22940 transitions. Second operand has 15 states, 14 states have (on average 8.571428571428571) internal successors, (120), 7 states have internal predecessors, (120), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-12-06 23:49:03,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:49:03,175 INFO L93 Difference]: Finished difference Result 22345 states and 34162 transitions. [2021-12-06 23:49:03,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 23:49:03,176 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 8.571428571428571) internal successors, (120), 7 states have internal predecessors, (120), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) Word has length 306 [2021-12-06 23:49:03,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:49:03,234 INFO L225 Difference]: With dead ends: 22345 [2021-12-06 23:49:03,234 INFO L226 Difference]: Without dead ends: 18807 [2021-12-06 23:49:03,246 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=124, Invalid=428, Unknown=0, NotChecked=0, Total=552 [2021-12-06 23:49:03,246 INFO L933 BasicCegarLoop]: 2646 mSDtfsCounter, 3464 mSDsluCounter, 19658 mSDsCounter, 0 mSdLazyCounter, 12627 mSolverCounterSat, 2835 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3760 SdHoareTripleChecker+Valid, 22304 SdHoareTripleChecker+Invalid, 15462 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2835 IncrementalHoareTripleChecker+Valid, 12627 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:49:03,246 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3760 Valid, 22304 Invalid, 15462 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2835 Valid, 12627 Invalid, 0 Unknown, 0 Unchecked, 20.3s Time] [2021-12-06 23:49:03,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18807 states. [2021-12-06 23:49:04,119 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18807 to 15434. [2021-12-06 23:49:04,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15434 states, 10743 states have (on average 1.3776412547705483) internal successors, (14800), 11376 states have internal predecessors, (14800), 3571 states have call successors, (3571), 860 states have call predecessors, (3571), 1119 states have return successors, (4585), 3543 states have call predecessors, (4585), 3569 states have call successors, (4585) [2021-12-06 23:49:04,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15434 states to 15434 states and 22956 transitions. [2021-12-06 23:49:04,219 INFO L78 Accepts]: Start accepts. Automaton has 15434 states and 22956 transitions. Word has length 306 [2021-12-06 23:49:04,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:49:04,220 INFO L470 AbstractCegarLoop]: Abstraction has 15434 states and 22956 transitions. [2021-12-06 23:49:04,220 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 8.571428571428571) internal successors, (120), 7 states have internal predecessors, (120), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-12-06 23:49:04,220 INFO L276 IsEmpty]: Start isEmpty. Operand 15434 states and 22956 transitions. [2021-12-06 23:49:04,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 308 [2021-12-06 23:49:04,233 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:49:04,234 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:49:04,234 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-12-06 23:49:04,234 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:49:04,234 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:49:04,234 INFO L85 PathProgramCache]: Analyzing trace with hash 479316454, now seen corresponding path program 1 times [2021-12-06 23:49:04,234 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:49:04,234 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [521629321] [2021-12-06 23:49:04,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:49:04,235 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:49:04,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:49:04,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:04,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:04,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:49:04,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:04,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:04,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:49:04,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:04,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:04,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:49:04,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:04,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:04,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:49:04,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:04,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-06 23:49:04,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:04,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-06 23:49:04,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:04,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:04,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-12-06 23:49:04,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:04,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:04,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-12-06 23:49:04,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:49:04,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-06 23:49:04,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-06 23:49:04,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-06 23:49:04,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-12-06 23:49:04,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:04,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-12-06 23:49:04,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 223 [2021-12-06 23:49:04,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-12-06 23:49:04,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-12-06 23:49:04,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-12-06 23:49:04,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2021-12-06 23:49:04,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-12-06 23:49:04,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 262 [2021-12-06 23:49:04,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-12-06 23:49:04,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 275 [2021-12-06 23:49:04,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-12-06 23:49:04,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 288 [2021-12-06 23:49:04,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-12-06 23:49:04,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:04,740 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 389 trivial. 0 not checked. [2021-12-06 23:49:04,740 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:49:04,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [521629321] [2021-12-06 23:49:04,740 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [521629321] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 23:49:04,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1761977251] [2021-12-06 23:49:04,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:49:04,740 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:49:04,740 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:49:04,741 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 23:49:04,742 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-06 23:49:05,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:05,383 INFO L263 TraceCheckSpWp]: Trace formula consists of 2981 conjuncts, 19 conjunts are in the unsatisfiable core [2021-12-06 23:49:05,389 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:49:05,709 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 145 proven. 3 refuted. 0 times theorem prover too weak. 259 trivial. 0 not checked. [2021-12-06 23:49:05,709 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 23:49:06,264 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 389 trivial. 0 not checked. [2021-12-06 23:49:06,264 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1761977251] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 23:49:06,264 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 23:49:06,265 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 8] total 22 [2021-12-06 23:49:06,265 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [74126283] [2021-12-06 23:49:06,265 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 23:49:06,266 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-12-06 23:49:06,266 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:49:06,266 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-12-06 23:49:06,266 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2021-12-06 23:49:06,266 INFO L87 Difference]: Start difference. First operand 15434 states and 22956 transitions. Second operand has 22 states, 20 states have (on average 8.95) internal successors, (179), 16 states have internal predecessors, (179), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-12-06 23:49:32,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:49:32,671 INFO L93 Difference]: Finished difference Result 32996 states and 49789 transitions. [2021-12-06 23:49:32,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2021-12-06 23:49:32,673 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 20 states have (on average 8.95) internal successors, (179), 16 states have internal predecessors, (179), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 307 [2021-12-06 23:49:32,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:49:32,722 INFO L225 Difference]: With dead ends: 32996 [2021-12-06 23:49:32,722 INFO L226 Difference]: Without dead ends: 17581 [2021-12-06 23:49:32,751 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 718 GetRequests, 683 SyntacticMatches, 2 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 204 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=202, Invalid=988, Unknown=0, NotChecked=0, Total=1190 [2021-12-06 23:49:32,751 INFO L933 BasicCegarLoop]: 2021 mSDtfsCounter, 2481 mSDsluCounter, 19763 mSDsCounter, 0 mSdLazyCounter, 16367 mSolverCounterSat, 2214 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 22.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2628 SdHoareTripleChecker+Valid, 21784 SdHoareTripleChecker+Invalid, 18581 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2214 IncrementalHoareTripleChecker+Valid, 16367 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 24.8s IncrementalHoareTripleChecker+Time [2021-12-06 23:49:32,752 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2628 Valid, 21784 Invalid, 18581 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2214 Valid, 16367 Invalid, 0 Unknown, 0 Unchecked, 24.8s Time] [2021-12-06 23:49:32,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17581 states. [2021-12-06 23:49:33,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17581 to 15435. [2021-12-06 23:49:33,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15435 states, 10744 states have (on average 1.377699180938198) internal successors, (14802), 11377 states have internal predecessors, (14802), 3571 states have call successors, (3571), 860 states have call predecessors, (3571), 1119 states have return successors, (4585), 3543 states have call predecessors, (4585), 3569 states have call successors, (4585) [2021-12-06 23:49:33,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15435 states to 15435 states and 22958 transitions. [2021-12-06 23:49:33,701 INFO L78 Accepts]: Start accepts. Automaton has 15435 states and 22958 transitions. Word has length 307 [2021-12-06 23:49:33,701 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:49:33,701 INFO L470 AbstractCegarLoop]: Abstraction has 15435 states and 22958 transitions. [2021-12-06 23:49:33,702 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 20 states have (on average 8.95) internal successors, (179), 16 states have internal predecessors, (179), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-12-06 23:49:33,702 INFO L276 IsEmpty]: Start isEmpty. Operand 15435 states and 22958 transitions. [2021-12-06 23:49:33,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 310 [2021-12-06 23:49:33,715 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:49:33,715 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:49:33,739 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2021-12-06 23:49:33,915 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2021-12-06 23:49:33,917 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:49:33,918 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:49:33,918 INFO L85 PathProgramCache]: Analyzing trace with hash -590493142, now seen corresponding path program 2 times [2021-12-06 23:49:33,919 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:49:33,919 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1783807923] [2021-12-06 23:49:33,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:49:33,920 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:49:33,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:49:34,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:34,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:34,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 23:49:34,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:34,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:34,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 23:49:34,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:34,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:34,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 23:49:34,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:34,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:34,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 23:49:34,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:34,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-06 23:49:34,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:34,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 23:49:34,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:34,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:34,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-06 23:49:34,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:34,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 23:49:34,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-06 23:49:34,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:49:34,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-06 23:49:34,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-06 23:49:34,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 185 [2021-12-06 23:49:34,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2021-12-06 23:49:34,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:49:34,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 201 [2021-12-06 23:49:34,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 225 [2021-12-06 23:49:34,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 229 [2021-12-06 23:49:34,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 238 [2021-12-06 23:49:34,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 242 [2021-12-06 23:49:34,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 251 [2021-12-06 23:49:34,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 255 [2021-12-06 23:49:34,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 264 [2021-12-06 23:49:34,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 268 [2021-12-06 23:49:34,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 277 [2021-12-06 23:49:34,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 281 [2021-12-06 23:49:34,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 290 [2021-12-06 23:49:34,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 294 [2021-12-06 23:49:34,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:49:34,456 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-06 23:49:34,456 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:49:34,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1783807923] [2021-12-06 23:49:34,456 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1783807923] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 23:49:34,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1698061438] [2021-12-06 23:49:34,457 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 23:49:34,457 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:49:34,457 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:49:34,458 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 23:49:34,459 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-12-06 23:49:35,500 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-12-06 23:49:35,500 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 23:49:35,513 INFO L263 TraceCheckSpWp]: Trace formula consists of 3011 conjuncts, 23 conjunts are in the unsatisfiable core [2021-12-06 23:49:35,518 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:49:35,863 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 152 proven. 6 refuted. 0 times theorem prover too weak. 262 trivial. 0 not checked. [2021-12-06 23:49:35,863 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 23:49:36,527 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-06 23:49:36,527 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1698061438] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 23:49:36,528 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 23:49:36,528 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9, 9] total 24 [2021-12-06 23:49:36,528 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [86868846] [2021-12-06 23:49:36,528 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 23:49:36,529 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-12-06 23:49:36,529 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:49:36,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-12-06 23:49:36,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=481, Unknown=0, NotChecked=0, Total=552 [2021-12-06 23:49:36,530 INFO L87 Difference]: Start difference. First operand 15435 states and 22958 transitions. Second operand has 24 states, 22 states have (on average 8.227272727272727) internal successors, (181), 18 states have internal predecessors, (181), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-12-06 23:50:08,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:50:08,327 INFO L93 Difference]: Finished difference Result 33027 states and 49901 transitions. [2021-12-06 23:50:08,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-06 23:50:08,329 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 22 states have (on average 8.227272727272727) internal successors, (181), 18 states have internal predecessors, (181), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 309 [2021-12-06 23:50:08,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:50:08,372 INFO L225 Difference]: With dead ends: 33027 [2021-12-06 23:50:08,372 INFO L226 Difference]: Without dead ends: 17611 [2021-12-06 23:50:08,396 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 725 GetRequests, 685 SyntacticMatches, 3 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 254 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=237, Invalid=1245, Unknown=0, NotChecked=0, Total=1482 [2021-12-06 23:50:08,396 INFO L933 BasicCegarLoop]: 2013 mSDtfsCounter, 3556 mSDsluCounter, 19257 mSDsCounter, 0 mSdLazyCounter, 15629 mSolverCounterSat, 3352 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 25.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3708 SdHoareTripleChecker+Valid, 21270 SdHoareTripleChecker+Invalid, 18981 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3352 IncrementalHoareTripleChecker+Valid, 15629 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 30.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:50:08,397 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3708 Valid, 21270 Invalid, 18981 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3352 Valid, 15629 Invalid, 0 Unknown, 0 Unchecked, 30.0s Time] [2021-12-06 23:50:08,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17611 states. [2021-12-06 23:50:09,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17611 to 15436. [2021-12-06 23:50:09,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15436 states, 10745 states have (on average 1.3777570963238717) internal successors, (14804), 11378 states have internal predecessors, (14804), 3571 states have call successors, (3571), 860 states have call predecessors, (3571), 1119 states have return successors, (4585), 3543 states have call predecessors, (4585), 3569 states have call successors, (4585) [2021-12-06 23:50:09,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15436 states to 15436 states and 22960 transitions. [2021-12-06 23:50:09,337 INFO L78 Accepts]: Start accepts. Automaton has 15436 states and 22960 transitions. Word has length 309 [2021-12-06 23:50:09,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:50:09,337 INFO L470 AbstractCegarLoop]: Abstraction has 15436 states and 22960 transitions. [2021-12-06 23:50:09,337 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 22 states have (on average 8.227272727272727) internal successors, (181), 18 states have internal predecessors, (181), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-12-06 23:50:09,337 INFO L276 IsEmpty]: Start isEmpty. Operand 15436 states and 22960 transitions. [2021-12-06 23:50:09,350 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-12-06 23:50:09,351 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:50:09,351 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:50:09,376 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-12-06 23:50:09,551 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:50:09,553 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:50:09,553 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:50:09,554 INFO L85 PathProgramCache]: Analyzing trace with hash -549788826, now seen corresponding path program 3 times [2021-12-06 23:50:09,554 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:50:09,555 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1980678322] [2021-12-06 23:50:09,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:50:09,556 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:50:10,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:50:10,166 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:50:10,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:50:10,822 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 23:50:10,822 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 23:50:10,823 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 23:50:10,824 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-12-06 23:50:10,827 INFO L732 BasicCegarLoop]: Path program histogram: [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:50:10,829 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 23:50:10,891 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 23:50:10,894 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 23:50:11,279 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 11:50:11 BoogieIcfgContainer [2021-12-06 23:50:11,279 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 23:50:11,279 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 23:50:11,280 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 23:50:11,280 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 23:50:11,280 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:45:32" (3/4) ... [2021-12-06 23:50:11,282 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 23:50:11,282 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 23:50:11,283 INFO L158 Benchmark]: Toolchain (without parser) took 284856.33ms. Allocated memory was 113.2MB in the beginning and 2.6GB in the end (delta: 2.5GB). Free memory was 63.9MB in the beginning and 880.7MB in the end (delta: -816.8MB). Peak memory consumption was 1.7GB. Max. memory is 16.1GB. [2021-12-06 23:50:11,283 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 113.2MB. Free memory is still 91.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:50:11,283 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1588.25ms. Allocated memory was 113.2MB in the beginning and 136.3MB in the end (delta: 23.1MB). Free memory was 63.7MB in the beginning and 56.8MB in the end (delta: 6.8MB). Peak memory consumption was 51.7MB. Max. memory is 16.1GB. [2021-12-06 23:50:11,283 INFO L158 Benchmark]: Boogie Procedure Inliner took 183.22ms. Allocated memory is still 136.3MB. Free memory was 56.8MB in the beginning and 61.9MB in the end (delta: -5.0MB). Peak memory consumption was 17.4MB. Max. memory is 16.1GB. [2021-12-06 23:50:11,284 INFO L158 Benchmark]: Boogie Preprocessor took 148.95ms. Allocated memory was 136.3MB in the beginning and 163.6MB in the end (delta: 27.3MB). Free memory was 61.9MB in the beginning and 82.1MB in the end (delta: -20.2MB). Peak memory consumption was 33.4MB. Max. memory is 16.1GB. [2021-12-06 23:50:11,284 INFO L158 Benchmark]: RCFGBuilder took 3930.20ms. Allocated memory was 163.6MB in the beginning and 278.9MB in the end (delta: 115.3MB). Free memory was 82.1MB in the beginning and 152.3MB in the end (delta: -70.2MB). Peak memory consumption was 76.0MB. Max. memory is 16.1GB. [2021-12-06 23:50:11,284 INFO L158 Benchmark]: TraceAbstraction took 278998.06ms. Allocated memory was 278.9MB in the beginning and 2.6GB in the end (delta: 2.4GB). Free memory was 152.3MB in the beginning and 880.7MB in the end (delta: -728.4MB). Peak memory consumption was 2.2GB. Max. memory is 16.1GB. [2021-12-06 23:50:11,284 INFO L158 Benchmark]: Witness Printer took 2.68ms. Allocated memory is still 2.6GB. Free memory is still 880.7MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:50:11,286 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 113.2MB. Free memory is still 91.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1588.25ms. Allocated memory was 113.2MB in the beginning and 136.3MB in the end (delta: 23.1MB). Free memory was 63.7MB in the beginning and 56.8MB in the end (delta: 6.8MB). Peak memory consumption was 51.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 183.22ms. Allocated memory is still 136.3MB. Free memory was 56.8MB in the beginning and 61.9MB in the end (delta: -5.0MB). Peak memory consumption was 17.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 148.95ms. Allocated memory was 136.3MB in the beginning and 163.6MB in the end (delta: 27.3MB). Free memory was 61.9MB in the beginning and 82.1MB in the end (delta: -20.2MB). Peak memory consumption was 33.4MB. Max. memory is 16.1GB. * RCFGBuilder took 3930.20ms. Allocated memory was 163.6MB in the beginning and 278.9MB in the end (delta: 115.3MB). Free memory was 82.1MB in the beginning and 152.3MB in the end (delta: -70.2MB). Peak memory consumption was 76.0MB. Max. memory is 16.1GB. * TraceAbstraction took 278998.06ms. Allocated memory was 278.9MB in the beginning and 2.6GB in the end (delta: 2.4GB). Free memory was 152.3MB in the beginning and 880.7MB in the end (delta: -728.4MB). Peak memory consumption was 2.2GB. Max. memory is 16.1GB. * Witness Printer took 2.68ms. Allocated memory is still 2.6GB. Free memory is still 880.7MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8151]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6893. Possible FailurePath: [L4340] int ldv_timer_state_5 = 0; [L4341] struct timer_list *ldv_timer_list_5 ; [L4342] struct timer_list *ldv_timer_list_4 ; [L4343] struct work_struct *ldv_work_struct_3_1 ; [L4344] struct mmc_host *vub300_mmc_ops_group0 ; [L4345] struct work_struct *ldv_work_struct_1_3 ; [L4346] int ldv_state_variable_0 ; [L4347] int ldv_state_variable_5 ; [L4348] int ldv_work_1_1 ; [L4349] int ldv_work_3_2 ; [L4350] int ldv_work_3_0 ; [L4351] struct work_struct *ldv_work_struct_2_3 ; [L4352] struct work_struct *ldv_work_struct_2_0 ; [L4353] struct work_struct *ldv_work_struct_2_2 ; [L4354] int ldv_timer_state_4 = 0; [L4355] int ref_cnt ; [L4356] int ldv_work_3_3 ; [L4357] int ldv_state_variable_1 ; [L4358] int ldv_state_variable_7 ; [L4359] struct work_struct *ldv_work_struct_3_3 ; [L4360] struct work_struct *ldv_work_struct_1_0 ; [L4361] struct work_struct *ldv_work_struct_1_1 ; [L4362] int ldv_work_1_3 ; [L4363] struct work_struct *ldv_work_struct_2_1 ; [L4364] struct work_struct *ldv_work_struct_3_2 ; [L4365] int ldv_state_variable_6 ; [L4366] int ldv_work_3_1 ; [L4367] int ldv_state_variable_2 ; [L4368] int ldv_work_2_0 ; [L4369] int usb_counter ; [L4370] struct work_struct *ldv_work_struct_3_0 ; [L4371] int ldv_work_1_2 ; [L4372] int LDV_IN_INTERRUPT = 1; [L4373] struct work_struct *ldv_work_struct_1_2 ; [L4374] int ldv_work_2_2 ; [L4375] int ldv_state_variable_3 ; [L4376] struct usb_interface *vub300_driver_group1 ; [L4377] int ldv_work_1_0 ; [L4378] int ldv_work_2_3 ; [L4379] int ldv_state_variable_4 ; [L4380] int ldv_work_2_1 ; [L4437] static bool limit_speed_to_24_MHz ; [L4438] static bool pad_input_to_usb_pkt ; [L4439] static bool disable_offload_processing ; [L4440] static bool force_1_bit_data_xfers ; [L4441] static bool force_polling_for_irqs ; [L4442] static int firmware_irqpoll_timeout = 1024; [L4443] static int force_max_req_size = 128; [L4444] static int firmware_rom_wait_states = 28; [L4445-L4450] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4451] struct usb_device_id const __mod_usb_device_table ; [L4452] static struct workqueue_struct *cmndworkqueue ; [L4453] static struct workqueue_struct *pollworkqueue ; [L4454] static struct workqueue_struct *deadworkqueue ; [L6440-L6442] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6853-L6859] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6932] int ldv_retval_0 ; [L6933] int ldv_retval_1 ; [L6937] int ldv_retval_3 ; [L6938] int ldv_retval_2 ; [L8154] int URB_STATE = 0; [L8155] int DEV_STATE = 0; [L8156] int INTERF_STATE = 0; [L8157] int SERIAL_STATE = 0; [L8158] void *usb_intfdata = (void *)0; [L8159] struct urb *int_urb = (struct urb *)0; [L8160] struct urb *bulk_urb = (struct urb *)0; [L8161] void (*completeFnInt)(struct urb * ) ; [L8162] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7530] struct usb_device_id *ldvarg1 ; [L7531] void *tmp ; [L7532] pm_message_t ldvarg0 ; [L7533] struct mmc_card *ldvarg4 ; [L7534] void *tmp___0 ; [L7535] struct mmc_ios *ldvarg3 ; [L7536] void *tmp___1 ; [L7537] int ldvarg5 ; [L7538] struct mmc_request *ldvarg2 ; [L7539] void *tmp___2 ; [L7540] int tmp___3 ; [L7541] int tmp___4 ; [L7542] int tmp___5 ; [L7543] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] tmp = ldv_init_zalloc(32UL) [L7546] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] CALL, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654847:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654847:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654847:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654847:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654847:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1824, \result={-55340232221128654847:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654847:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654847:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] RET, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1824UL)={-55340232221128654847:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] tmp___0 = ldv_init_zalloc(1824UL) [L7548] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={-55340232221128654849:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={-55340232221128654849:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] tmp___1 = ldv_init_zalloc(16UL) [L7550] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={-73786976294838206465:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={-73786976294838206465:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] tmp___2 = ldv_init_zalloc(136UL) [L7552] ldvarg2 = (struct mmc_request *)tmp___2 [L7553] FCALL ldv_initialize() [L7554] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={91:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={91:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, tmp={91:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7554] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={91:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7555] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={90:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={90:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, tmp={90:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7555] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={90:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7556] ldv_state_variable_6 = 0 [L7557] CALL work_init_3() [L6942] ldv_work_3_0 = 0 [L6943] ldv_work_3_1 = 0 [L6944] ldv_work_3_2 = 0 [L6945] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7557] RET work_init_3() [L7558] ldv_state_variable_3 = 1 [L7559] ldv_state_variable_7 = 0 [L7560] CALL work_init_2() [L6992] ldv_work_2_0 = 0 [L6993] ldv_work_2_1 = 0 [L6994] ldv_work_2_2 = 0 [L6995] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7560] RET work_init_2() [L7561] ldv_state_variable_2 = 1 [L7562] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7562] RET work_init_1() [L7563] ldv_state_variable_1 = 1 [L7564] ldv_state_variable_4 = 1 [L7565] ref_cnt = 0 [L7566] ldv_state_variable_0 = 1 [L7567] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: [L7716] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7717] COND TRUE ldv_state_variable_0 == 1 [L7718] CALL, EXPR vub300_init() [L6862] int result ; [L6863] struct lock_class_key __key ; [L6864] char const *__lock_name ; [L6865] struct workqueue_struct *tmp ; [L6866] struct lock_class_key __key___0 ; [L6867] char const *__lock_name___0 ; [L6868] struct workqueue_struct *tmp___0 ; [L6869] struct lock_class_key __key___1 ; [L6870] char const *__lock_name___1 ; [L6871] struct workqueue_struct *tmp___1 ; [L6875] __lock_name = "kvub300c" [L6876] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6877] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __key={93:0}, __key___0={94:0}, __key___1={95:0}, __lock_name={74:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6878] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] __lock_name___0 = "kvub300p" [L6885] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6886] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={93:0}, __key___0={94:0}, __key___1={95:0}, __lock_name={74:0}, __lock_name___0={77:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6887] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6893] __lock_name___1 = "kvub300d" [L6894] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6895] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={93:0}, __key___0={94:0}, __key___1={95:0}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6896] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6902] CALL, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L8056] ldv_func_ret_type___13 ldv_func_res ; [L8057] int tmp ; [L8059] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8538] return __VERIFIER_nondet_int(); [L8059] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8059] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8060] ldv_func_res = tmp [L8061] ldv_state_variable_6 = 1 [L8062] usb_counter = 0 [L8063] CALL ldv_usb_driver_6() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={-92233720368547758081:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L8063] RET ldv_usb_driver_6() [L8064] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={87:0}, ldv_func_arg1={87:0}, ldv_func_arg2={8706:8707}, ldv_func_arg2={8706:8707}, ldv_func_arg3={83:0}, ldv_func_arg3={83:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6902] RET, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6902] result = ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6903] COND FALSE !(result != 0) [L6908] return (0); [L6908] return (0); [L6908] return (0); [L6908] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7718] RET, EXPR vub300_init() [L7718] ldv_retval_3 = vub300_init() [L7719] COND TRUE ldv_retval_3 == 0 [L7720] ldv_state_variable_0 = 3 [L7721] ldv_state_variable_7 = 1 [L7722] CALL ldv_initialize_mmc_host_ops_7() [L7001] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={-36893488147419103233:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={-36893488147419103233:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] tmp = ldv_init_zalloc(2624UL) [L7004] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7722] RET ldv_initialize_mmc_host_ops_7() [L7725] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7572] COND TRUE ldv_state_variable_6 != 0 [L7573] tmp___4 = __VERIFIER_nondet_int() [L7575] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7576] COND TRUE ldv_state_variable_6 == 1 [L7577] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6445] struct vub300_mmc_host *vub300 ; [L6446] struct usb_host_interface *iface_desc ; [L6447] struct usb_device *udev ; [L6448] struct usb_device *tmp ; [L6449] struct usb_device *tmp___0 ; [L6450] int i ; [L6451] int retval ; [L6452] struct urb *command_out_urb ; [L6453] struct urb *command_res_urb ; [L6454] struct mmc_host *mmc ; [L6455] char manufacturer[48U] ; [L6456] char product[32U] ; [L6457] char serial_number[32U] ; [L6458] void *tmp___1 ; [L6459] struct lock_class_key __key ; [L6460] struct lock_class_key __key___0 ; [L6461] int tmp___2 ; [L6462] struct usb_endpoint_descriptor *endpoint ; [L6463] int tmp___4 ; [L6464] char *tmp___5 ; [L6465] int tmp___6 ; [L6466] int tmp___7 ; [L6467] int tmp___8 ; [L6468] unsigned int tmp___9 ; [L6469] unsigned int tmp___10 ; [L6470] unsigned int tmp___11 ; [L6471] struct lock_class_key __key___1 ; [L6472] atomic_long_t __constr_expr_0 ; [L6473] struct lock_class_key __key___2 ; [L6474] struct lock_class_key __key___3 ; [L6475] atomic_long_t __constr_expr_1 ; [L6476] struct lock_class_key __key___4 ; [L6477] atomic_long_t __constr_expr_2 ; [L6478] int tmp___12 ; [L6479] int tmp___13 ; [L6481] CALL, EXPR interface_to_usbdev(interface) [L7799] struct usb_device *tmp ; [L7801] CALL, EXPR ldv_interface_to_usbdev() [L8277] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8282] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND FALSE !(tmp___0 != 0) [L4268] tmp = malloc(size) [L4269] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L4270] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L4270] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L4271] return (p); VAL [={0:0}, ={0:0}, \old(size)=1672, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8282] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8282] result = ldv_malloc(sizeof(struct usb_device)) [L8283] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8287] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result={-18446744073709551615:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7801] RET, EXPR ldv_interface_to_usbdev() [L7801] tmp = ldv_interface_to_usbdev() [L7802] return (tmp); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={-92233720368547758081:0}, intf={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6481] RET, EXPR interface_to_usbdev(interface) [L6481] tmp = interface_to_usbdev(interface) [L6482] CALL, EXPR ldv_usb_get_dev_44(tmp) [L7996] CALL ldv_get_dev(ldv_func_arg1) [L8293] DEV_STATE = DEV_STATE + 1 [L8294] return (data); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, data={-18446744073709551615:0}, data={-18446744073709551615:0}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7996] RET ldv_get_dev(ldv_func_arg1) [L7997] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-18446744073709551615:0}, ldv_func_arg1={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6482] RET, EXPR ldv_usb_get_dev_44(tmp) [L6482] tmp___0 = ldv_usb_get_dev_44(tmp) [L6483] udev = tmp___0 [L6484] retval = -12 [L6485] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={89:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6485-L6486] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=125, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0={0:0}, arg2={106:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6485-L6486] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={89:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=126, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6487] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={89:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=127, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6487] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=127, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0={0:0}, arg2={109:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6487] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={89:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=127, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=128, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6488] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={89:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=129, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6488-L6489] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=129, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0={0:0}, arg2={114:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6488-L6489] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={89:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=129, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=130, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6491] udev->descriptor.idVendor [L6491] udev->descriptor.idProduct [L6493] CALL, EXPR ldv_usb_alloc_urb_45(0, 208U) [L8002] ldv_func_ret_type___11 ldv_func_res ; [L8003] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8005] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8514] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND TRUE tmp___0 != 0 [L4266] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8514] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0=0, arg1=208, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8514] return ldv_malloc(sizeof(struct urb)); [L8005] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8005] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8006] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8007] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8186] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8007] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8008] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6493] RET, EXPR ldv_usb_alloc_urb_45(0, 208U) [L6493] command_out_urb = ldv_usb_alloc_urb_45(0, 208U) [L6494] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6495] retval = -12 [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, command_out_urb={0:0}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, retval=-12, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7577] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7577] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7578] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7709] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7710] CALL vub300_exit() [L6922] CALL ldv_usb_deregister_61(& vub300_driver) [L8094] FCALL usb_deregister(arg) [L8095] ldv_state_variable_6 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg={87:0}, arg={87:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6922] RET ldv_usb_deregister_61(& vub300_driver) [L6923] CALL ldv_flush_workqueue_62(cmndworkqueue) [L8102] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8103] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8103] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6923] RET ldv_flush_workqueue_62(cmndworkqueue) [L6924] CALL ldv_flush_workqueue_63(pollworkqueue) [L8110] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8111] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8111] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6924] RET ldv_flush_workqueue_63(pollworkqueue) [L6925] CALL ldv_flush_workqueue_64(deadworkqueue) [L8118] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8119] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8119] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6925] RET ldv_flush_workqueue_64(deadworkqueue) [L6926] CALL ldv_destroy_workqueue_65(cmndworkqueue) [L8126] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8127] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8127] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6926] RET ldv_destroy_workqueue_65(cmndworkqueue) [L6927] CALL ldv_destroy_workqueue_66(pollworkqueue) [L8134] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8135] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8135] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6927] RET ldv_destroy_workqueue_66(pollworkqueue) [L6928] CALL ldv_destroy_workqueue_67(deadworkqueue) [L8142] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8143] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8143] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L6928] RET ldv_destroy_workqueue_67(deadworkqueue) [L7710] RET vub300_exit() [L7711] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-55340232221128654847:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-55340232221128654847:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L7752] CALL ldv_check_final_state() [L8355] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8359] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8360] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] [L8151] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-36893488147419103233:0}, vub300_table={85:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1582 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 278.5s, OverallIterations: 20, TraceHistogramMax: 8, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.3s, AutomataDifference: 249.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 75346 SdHoareTripleChecker+Valid, 231.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 71562 mSDsluCounter, 189174 SdHoareTripleChecker+Invalid, 209.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 145174 mSDsCounter, 52108 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 120582 IncrementalHoareTripleChecker+Invalid, 172690 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 52108 mSolverCounterUnsat, 44000 mSDtfsCounter, 120582 mSolverCounterSat, 0.8s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 3922 GetRequests, 3597 SyntacticMatches, 5 SemanticMatches, 320 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1272 ImplicationChecksByTransitivity, 3.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=24607occurred in iteration=8, InterpolantAutomatonStates: 229, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 12.4s AutomataMinimizationTime, 19 MinimizatonAttempts, 37878 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.4s SsaConstructionTime, 3.1s SatisfiabilityAnalysisTime, 9.2s InterpolantComputationTime, 6164 NumberOfCodeBlocks, 6164 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 6740 ConstructedInterpolants, 0 QuantifiedInterpolants, 12745 SizeOfPredicates, 10 NumberOfNonLiveVariables, 14709 ConjunctsInSsa, 75 ConjunctsInUnsatCore, 27 InterpolantComputations, 16 PerfectInterpolantSequences, 7029/7158 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 23:50:11,505 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-12-06 23:50:11,524 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:50:12,897 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:50:12,900 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:50:12,929 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:50:12,930 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:50:12,931 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:50:12,933 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:50:12,935 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:50:12,937 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:50:12,939 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:50:12,940 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:50:12,941 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:50:12,942 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:50:12,943 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:50:12,944 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:50:12,946 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:50:12,947 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:50:12,948 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:50:12,950 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:50:12,952 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:50:12,954 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:50:12,956 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:50:12,957 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:50:12,958 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:50:12,961 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:50:12,962 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:50:12,962 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:50:12,963 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:50:12,964 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:50:12,965 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:50:12,965 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:50:12,966 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:50:12,967 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:50:12,968 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:50:12,973 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:50:12,973 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:50:12,974 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:50:12,974 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:50:12,974 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:50:12,975 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:50:12,976 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:50:12,977 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-06 23:50:13,001 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:50:13,001 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:50:13,001 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:50:13,002 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:50:13,002 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 23:50:13,003 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 23:50:13,003 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:50:13,003 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:50:13,003 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:50:13,004 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:50:13,004 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:50:13,004 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 23:50:13,004 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 23:50:13,004 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 23:50:13,005 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-06 23:50:13,005 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-06 23:50:13,005 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-06 23:50:13,005 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:50:13,005 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:50:13,005 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 23:50:13,005 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:50:13,006 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:50:13,006 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 23:50:13,006 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:50:13,006 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:50:13,006 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 23:50:13,006 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 23:50:13,006 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-06 23:50:13,006 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-06 23:50:13,007 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 23:50:13,007 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 23:50:13,007 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 23:50:13,007 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:50:13,007 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-06 23:50:13,007 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 [2021-12-06 23:50:13,235 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:50:13,254 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:50:13,256 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:50:13,257 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:50:13,258 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:50:13,259 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 23:50:13,301 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data/7571a1ef1/34d9376f3f2a4061a681f1baecad6f6c/FLAGf63f95488 [2021-12-06 23:50:13,873 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:50:13,874 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 23:50:13,909 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data/7571a1ef1/34d9376f3f2a4061a681f1baecad6f6c/FLAGf63f95488 [2021-12-06 23:50:14,024 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/data/7571a1ef1/34d9376f3f2a4061a681f1baecad6f6c [2021-12-06 23:50:14,026 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:50:14,027 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:50:14,028 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:50:14,028 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:50:14,031 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:50:14,032 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:50:14" (1/1) ... [2021-12-06 23:50:14,033 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2b76803e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:14, skipping insertion in model container [2021-12-06 23:50:14,033 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:50:14" (1/1) ... [2021-12-06 23:50:14,038 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:50:14,123 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:50:15,471 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-06 23:50:15,506 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:50:15,527 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-06 23:50:15,596 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:50:15,852 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-06 23:50:15,861 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:50:15,873 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:50:16,094 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-06 23:50:16,100 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:50:16,159 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:50:16,160 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16 WrapperNode [2021-12-06 23:50:16,160 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:50:16,161 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:50:16,161 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:50:16,161 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:50:16,166 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,221 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,308 INFO L137 Inliner]: procedures = 276, calls = 1811, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4398 [2021-12-06 23:50:16,308 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:50:16,309 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:50:16,309 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:50:16,309 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:50:16,315 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,315 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,333 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,333 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,443 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,461 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,479 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,515 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:50:16,515 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:50:16,516 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:50:16,516 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:50:16,516 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (1/1) ... [2021-12-06 23:50:16,523 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:50:16,532 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:50:16,541 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 23:50:16,543 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 23:50:16,575 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-06 23:50:16,575 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-12-06 23:50:16,575 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-12-06 23:50:16,575 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_12 [2021-12-06 23:50:16,575 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_12 [2021-12-06 23:50:16,576 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-06 23:50:16,576 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-06 23:50:16,576 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 23:50:16,576 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-06 23:50:16,576 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 23:50:16,576 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 23:50:16,576 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 23:50:16,576 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-06 23:50:16,576 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-06 23:50:16,576 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-12-06 23:50:16,576 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-12-06 23:50:16,576 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-12-06 23:50:16,577 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-12-06 23:50:16,577 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-12-06 23:50:16,577 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-12-06 23:50:16,577 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-06 23:50:16,577 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-06 23:50:16,577 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-12-06 23:50:16,577 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-12-06 23:50:16,577 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 23:50:16,577 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 23:50:16,577 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-06 23:50:16,577 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-06 23:50:16,577 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-12-06 23:50:16,578 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-12-06 23:50:16,578 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-12-06 23:50:16,578 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-12-06 23:50:16,578 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_50 [2021-12-06 23:50:16,578 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_50 [2021-12-06 23:50:16,578 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-12-06 23:50:16,578 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-12-06 23:50:16,578 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 23:50:16,579 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 23:50:16,579 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 23:50:16,579 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 23:50:16,579 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 23:50:16,579 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 23:50:16,579 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-12-06 23:50:16,579 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-12-06 23:50:16,579 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-12-06 23:50:16,580 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-12-06 23:50:16,580 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-12-06 23:50:16,580 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-12-06 23:50:16,588 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-12-06 23:50:16,588 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-12-06 23:50:16,588 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_29 [2021-12-06 23:50:16,588 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_29 [2021-12-06 23:50:16,588 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-12-06 23:50:16,588 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-12-06 23:50:16,588 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 23:50:16,588 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_27 [2021-12-06 23:50:16,589 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_27 [2021-12-06 23:50:16,589 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-06 23:50:16,589 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-06 23:50:16,589 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-12-06 23:50:16,589 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-12-06 23:50:16,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 23:50:16,589 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_13 [2021-12-06 23:50:16,589 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_13 [2021-12-06 23:50:16,589 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-12-06 23:50:16,590 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-12-06 23:50:16,590 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-12-06 23:50:16,590 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-12-06 23:50:16,590 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-12-06 23:50:16,590 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-12-06 23:50:16,590 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-12-06 23:50:16,590 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-12-06 23:50:16,590 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_15 [2021-12-06 23:50:16,590 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_15 [2021-12-06 23:50:16,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-12-06 23:50:16,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-06 23:50:16,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-06 23:50:16,591 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 23:50:16,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-06 23:50:16,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 23:50:16,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-06 23:50:16,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-06 23:50:16,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-06 23:50:16,592 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-06 23:50:16,592 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-12-06 23:50:16,592 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-12-06 23:50:16,592 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-06 23:50:16,592 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-06 23:50:16,592 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-12-06 23:50:16,592 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-12-06 23:50:16,592 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-12-06 23:50:16,592 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-12-06 23:50:16,593 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-12-06 23:50:16,593 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-12-06 23:50:16,593 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-12-06 23:50:16,593 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-12-06 23:50:16,593 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-12-06 23:50:16,593 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-12-06 23:50:16,593 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-12-06 23:50:16,593 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-12-06 23:50:16,593 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-12-06 23:50:16,594 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-12-06 23:50:16,594 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-12-06 23:50:16,594 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-12-06 23:50:16,594 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-12-06 23:50:16,594 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-12-06 23:50:16,594 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-12-06 23:50:16,594 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-12-06 23:50:16,594 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_4 [2021-12-06 23:50:16,594 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_4 [2021-12-06 23:50:16,595 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-12-06 23:50:16,595 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-12-06 23:50:16,595 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-12-06 23:50:16,595 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-12-06 23:50:16,595 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-06 23:50:16,595 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-06 23:50:16,595 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 23:50:16,595 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 23:50:16,596 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-06 23:50:16,596 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-06 23:50:16,596 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-12-06 23:50:16,596 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-12-06 23:50:16,596 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-06 23:50:16,596 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-06 23:50:16,596 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 23:50:16,596 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 23:50:16,596 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-12-06 23:50:16,597 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-12-06 23:50:16,597 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-12-06 23:50:16,597 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-12-06 23:50:16,597 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-06 23:50:16,597 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-12-06 23:50:16,597 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-12-06 23:50:16,597 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-06 23:50:16,597 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-06 23:50:16,597 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-12-06 23:50:16,598 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-12-06 23:50:16,598 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-06 23:50:16,598 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 23:50:16,598 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 23:50:16,598 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_32 [2021-12-06 23:50:16,598 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_32 [2021-12-06 23:50:16,598 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-12-06 23:50:16,598 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-12-06 23:50:16,598 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 23:50:16,598 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-12-06 23:50:16,599 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-12-06 23:50:16,599 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_4 [2021-12-06 23:50:16,599 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_4 [2021-12-06 23:50:16,599 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-12-06 23:50:16,599 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-12-06 23:50:16,599 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-12-06 23:50:16,599 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-12-06 23:50:16,599 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-12-06 23:50:16,599 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-12-06 23:50:16,600 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:50:16,600 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-12-06 23:50:16,600 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-12-06 23:50:16,600 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_9 [2021-12-06 23:50:16,600 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_9 [2021-12-06 23:50:16,600 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-06 23:50:16,600 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-06 23:50:16,600 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 23:50:16,600 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-12-06 23:50:16,600 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-12-06 23:50:16,601 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-06 23:50:16,601 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-12-06 23:50:16,601 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-12-06 23:50:16,601 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-06 23:50:16,601 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 23:50:16,601 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 23:50:16,601 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-06 23:50:16,601 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_4 [2021-12-06 23:50:16,601 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_4 [2021-12-06 23:50:16,601 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-12-06 23:50:16,602 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-12-06 23:50:16,602 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-12-06 23:50:16,602 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-12-06 23:50:16,602 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-12-06 23:50:16,602 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-12-06 23:50:16,602 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-12-06 23:50:16,602 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-12-06 23:50:16,602 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-12-06 23:50:16,602 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-12-06 23:50:16,602 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-12-06 23:50:16,603 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-12-06 23:50:16,603 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-12-06 23:50:16,603 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-12-06 23:50:16,603 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-12-06 23:50:16,603 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-12-06 23:50:16,603 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-12-06 23:50:16,603 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-12-06 23:50:16,603 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-12-06 23:50:16,603 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-12-06 23:50:16,603 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-12-06 23:50:16,604 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-12-06 23:50:16,604 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-12-06 23:50:16,604 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-12-06 23:50:16,604 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-12-06 23:50:16,604 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-12-06 23:50:16,604 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~C_ULONG~TO~VOID [2021-12-06 23:50:16,604 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~C_ULONG~TO~VOID [2021-12-06 23:50:16,604 INFO L130 BoogieDeclarations]: Found specification of procedure delayed_work_timer_fn [2021-12-06 23:50:16,604 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_47 [2021-12-06 23:50:16,604 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_47 [2021-12-06 23:50:16,605 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-06 23:50:16,605 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-06 23:50:16,605 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-06 23:50:16,605 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-12-06 23:50:16,605 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-12-06 23:50:16,605 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-12-06 23:50:16,605 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-12-06 23:50:16,605 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-06 23:50:16,605 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-06 23:50:16,606 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-12-06 23:50:16,606 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-12-06 23:50:16,606 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-12-06 23:50:16,606 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-12-06 23:50:16,606 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-12-06 23:50:16,606 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:50:16,606 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:50:17,029 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:50:17,032 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:50:25,410 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 23:51:02,332 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:51:02,350 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:51:02,351 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-06 23:51:02,354 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:51:02 BoogieIcfgContainer [2021-12-06 23:51:02,354 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:51:02,355 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 23:51:02,355 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 23:51:02,357 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 23:51:02,357 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 11:50:14" (1/3) ... [2021-12-06 23:51:02,358 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7891037e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:51:02, skipping insertion in model container [2021-12-06 23:51:02,358 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:50:16" (2/3) ... [2021-12-06 23:51:02,358 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7891037e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:51:02, skipping insertion in model container [2021-12-06 23:51:02,358 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:51:02" (3/3) ... [2021-12-06 23:51:02,359 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 23:51:02,363 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 23:51:02,363 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 23:51:02,402 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 23:51:02,407 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 23:51:02,407 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 23:51:02,442 INFO L276 IsEmpty]: Start isEmpty. Operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) [2021-12-06 23:51:02,456 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-12-06 23:51:02,456 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:02,456 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:02,457 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:02,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:02,461 INFO L85 PathProgramCache]: Analyzing trace with hash -956630900, now seen corresponding path program 1 times [2021-12-06 23:51:02,473 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:02,473 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [629239132] [2021-12-06 23:51:02,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:02,474 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:02,474 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:02,475 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:02,476 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-06 23:51:02,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:02,989 INFO L263 TraceCheckSpWp]: Trace formula consists of 921 conjuncts, 1 conjunts are in the unsatisfiable core [2021-12-06 23:51:02,995 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:03,502 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-12-06 23:51:03,502 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:03,503 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:03,503 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [629239132] [2021-12-06 23:51:03,503 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [629239132] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:03,503 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:03,504 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:51:03,505 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1309795919] [2021-12-06 23:51:03,505 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:03,509 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 23:51:03,509 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:03,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 23:51:03,531 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 23:51:03,544 INFO L87 Difference]: Start difference. First operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) Second operand has 2 states, 2 states have (on average 28.5) internal successors, (57), 2 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 23:51:03,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:03,648 INFO L93 Difference]: Finished difference Result 3157 states and 4649 transitions. [2021-12-06 23:51:03,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 23:51:03,649 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 28.5) internal successors, (57), 2 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 113 [2021-12-06 23:51:03,649 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:03,670 INFO L225 Difference]: With dead ends: 3157 [2021-12-06 23:51:03,670 INFO L226 Difference]: Without dead ends: 1565 [2021-12-06 23:51:03,681 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 23:51:03,683 INFO L933 BasicCegarLoop]: 2290 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 2290 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:03,684 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 2290 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:51:03,698 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1565 states. [2021-12-06 23:51:03,780 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1565 to 1565. [2021-12-06 23:51:03,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1565 states, 1099 states have (on average 1.3876251137397635) internal successors, (1525), 1154 states have internal predecessors, (1525), 373 states have call successors, (373), 93 states have call predecessors, (373), 92 states have return successors, (369), 343 states have call predecessors, (369), 369 states have call successors, (369) [2021-12-06 23:51:03,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1565 states to 1565 states and 2267 transitions. [2021-12-06 23:51:03,797 INFO L78 Accepts]: Start accepts. Automaton has 1565 states and 2267 transitions. Word has length 113 [2021-12-06 23:51:03,798 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:03,798 INFO L470 AbstractCegarLoop]: Abstraction has 1565 states and 2267 transitions. [2021-12-06 23:51:03,798 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 28.5) internal successors, (57), 2 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 23:51:03,798 INFO L276 IsEmpty]: Start isEmpty. Operand 1565 states and 2267 transitions. [2021-12-06 23:51:03,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-12-06 23:51:03,804 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:03,804 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:03,826 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-06 23:51:04,004 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:04,005 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:04,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:04,006 INFO L85 PathProgramCache]: Analyzing trace with hash -1997437564, now seen corresponding path program 1 times [2021-12-06 23:51:04,007 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:04,007 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1986357433] [2021-12-06 23:51:04,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:04,008 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:04,008 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:04,009 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:04,009 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-06 23:51:04,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:04,469 INFO L263 TraceCheckSpWp]: Trace formula consists of 921 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-06 23:51:04,475 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:05,052 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2021-12-06 23:51:05,053 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:05,053 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:05,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1986357433] [2021-12-06 23:51:05,053 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1986357433] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:05,053 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:05,053 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:51:05,054 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1512726325] [2021-12-06 23:51:05,054 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:05,055 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:51:05,055 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:05,055 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:51:05,056 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:51:05,056 INFO L87 Difference]: Start difference. First operand 1565 states and 2267 transitions. Second operand has 6 states, 5 states have (on average 10.6) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-12-06 23:51:05,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:05,717 INFO L93 Difference]: Finished difference Result 3124 states and 4529 transitions. [2021-12-06 23:51:05,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:51:05,718 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 10.6) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 113 [2021-12-06 23:51:05,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:05,728 INFO L225 Difference]: With dead ends: 3124 [2021-12-06 23:51:05,729 INFO L226 Difference]: Without dead ends: 1568 [2021-12-06 23:51:05,734 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 114 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:51:05,735 INFO L933 BasicCegarLoop]: 2258 mSDtfsCounter, 6 mSDsluCounter, 9018 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11276 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:05,736 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11276 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 23:51:05,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1568 states. [2021-12-06 23:51:05,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1568 to 1568. [2021-12-06 23:51:05,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1568 states, 1101 states have (on average 1.387829246139873) internal successors, (1528), 1157 states have internal predecessors, (1528), 373 states have call successors, (373), 93 states have call predecessors, (373), 93 states have return successors, (373), 343 states have call predecessors, (373), 369 states have call successors, (373) [2021-12-06 23:51:05,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1568 states to 1568 states and 2274 transitions. [2021-12-06 23:51:05,797 INFO L78 Accepts]: Start accepts. Automaton has 1568 states and 2274 transitions. Word has length 113 [2021-12-06 23:51:05,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:05,798 INFO L470 AbstractCegarLoop]: Abstraction has 1568 states and 2274 transitions. [2021-12-06 23:51:05,798 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 10.6) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-12-06 23:51:05,798 INFO L276 IsEmpty]: Start isEmpty. Operand 1568 states and 2274 transitions. [2021-12-06 23:51:05,800 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-12-06 23:51:05,800 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:05,801 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:05,821 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-06 23:51:06,001 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:06,001 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:06,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:06,002 INFO L85 PathProgramCache]: Analyzing trace with hash -54256158, now seen corresponding path program 1 times [2021-12-06 23:51:06,003 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:06,003 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1783181923] [2021-12-06 23:51:06,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:06,003 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:06,003 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:06,004 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:06,005 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-06 23:51:06,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:06,496 INFO L263 TraceCheckSpWp]: Trace formula consists of 943 conjuncts, 6 conjunts are in the unsatisfiable core [2021-12-06 23:51:06,499 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:07,130 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2021-12-06 23:51:07,131 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 23:51:08,615 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-06 23:51:08,615 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:08,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1783181923] [2021-12-06 23:51:08,616 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1783181923] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 23:51:08,616 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 23:51:08,616 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 11 [2021-12-06 23:51:08,616 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1577413241] [2021-12-06 23:51:08,616 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 23:51:08,617 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-12-06 23:51:08,617 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:08,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-12-06 23:51:08,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2021-12-06 23:51:08,618 INFO L87 Difference]: Start difference. First operand 1568 states and 2274 transitions. Second operand has 11 states, 9 states have (on average 7.555555555555555) internal successors, (68), 11 states have internal predecessors, (68), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 23:51:09,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:09,781 INFO L93 Difference]: Finished difference Result 3130 states and 4543 transitions. [2021-12-06 23:51:09,782 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 23:51:09,783 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 7.555555555555555) internal successors, (68), 11 states have internal predecessors, (68), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 115 [2021-12-06 23:51:09,783 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:09,796 INFO L225 Difference]: With dead ends: 3130 [2021-12-06 23:51:09,796 INFO L226 Difference]: Without dead ends: 1571 [2021-12-06 23:51:09,804 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 219 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=46, Invalid=136, Unknown=0, NotChecked=0, Total=182 [2021-12-06 23:51:09,805 INFO L933 BasicCegarLoop]: 2259 mSDtfsCounter, 19 mSDsluCounter, 9015 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 11274 SdHoareTripleChecker+Invalid, 97 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:09,805 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 11274 Invalid, 97 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-06 23:51:09,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1571 states. [2021-12-06 23:51:09,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1571 to 1569. [2021-12-06 23:51:09,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1569 states, 1102 states have (on average 1.3883847549909256) internal successors, (1530), 1158 states have internal predecessors, (1530), 373 states have call successors, (373), 93 states have call predecessors, (373), 93 states have return successors, (373), 343 states have call predecessors, (373), 369 states have call successors, (373) [2021-12-06 23:51:09,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1569 states to 1569 states and 2276 transitions. [2021-12-06 23:51:09,883 INFO L78 Accepts]: Start accepts. Automaton has 1569 states and 2276 transitions. Word has length 115 [2021-12-06 23:51:09,884 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:09,884 INFO L470 AbstractCegarLoop]: Abstraction has 1569 states and 2276 transitions. [2021-12-06 23:51:09,884 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 7.555555555555555) internal successors, (68), 11 states have internal predecessors, (68), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 23:51:09,884 INFO L276 IsEmpty]: Start isEmpty. Operand 1569 states and 2276 transitions. [2021-12-06 23:51:09,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-12-06 23:51:09,887 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:09,887 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:09,902 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Ended with exit code 0 [2021-12-06 23:51:10,088 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:10,088 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:10,089 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:10,089 INFO L85 PathProgramCache]: Analyzing trace with hash 409821892, now seen corresponding path program 2 times [2021-12-06 23:51:10,090 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:10,090 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1184594264] [2021-12-06 23:51:10,090 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 23:51:10,090 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:10,090 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:10,091 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:10,092 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-06 23:51:10,456 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 23:51:10,456 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 23:51:10,472 INFO L263 TraceCheckSpWp]: Trace formula consists of 742 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:51:10,475 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:11,931 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-12-06 23:51:11,931 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:11,931 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:11,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1184594264] [2021-12-06 23:51:11,932 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1184594264] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:11,932 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:11,932 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:51:11,932 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1656317489] [2021-12-06 23:51:11,932 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:11,932 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:51:11,933 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:11,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:51:11,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:11,933 INFO L87 Difference]: Start difference. First operand 1569 states and 2276 transitions. Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:51:12,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:12,102 INFO L93 Difference]: Finished difference Result 4654 states and 6900 transitions. [2021-12-06 23:51:12,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:51:12,102 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 117 [2021-12-06 23:51:12,103 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:12,120 INFO L225 Difference]: With dead ends: 4654 [2021-12-06 23:51:12,121 INFO L226 Difference]: Without dead ends: 3108 [2021-12-06 23:51:12,127 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:12,128 INFO L933 BasicCegarLoop]: 2881 mSDtfsCounter, 2198 mSDsluCounter, 2258 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2198 SdHoareTripleChecker+Valid, 5139 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:12,128 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2198 Valid, 5139 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:51:12,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3108 states. [2021-12-06 23:51:12,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3108 to 3102. [2021-12-06 23:51:12,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3102 states, 2182 states have (on average 1.3890925756186985) internal successors, (3031), 2290 states have internal predecessors, (3031), 735 states have call successors, (735), 184 states have call predecessors, (735), 184 states have return successors, (770), 679 states have call predecessors, (770), 731 states have call successors, (770) [2021-12-06 23:51:12,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3102 states to 3102 states and 4536 transitions. [2021-12-06 23:51:12,232 INFO L78 Accepts]: Start accepts. Automaton has 3102 states and 4536 transitions. Word has length 117 [2021-12-06 23:51:12,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:12,232 INFO L470 AbstractCegarLoop]: Abstraction has 3102 states and 4536 transitions. [2021-12-06 23:51:12,232 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:51:12,232 INFO L276 IsEmpty]: Start isEmpty. Operand 3102 states and 4536 transitions. [2021-12-06 23:51:12,234 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2021-12-06 23:51:12,234 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:12,234 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:12,252 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2021-12-06 23:51:12,435 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:12,435 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:12,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:12,436 INFO L85 PathProgramCache]: Analyzing trace with hash -180969058, now seen corresponding path program 1 times [2021-12-06 23:51:12,436 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:12,436 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1099911095] [2021-12-06 23:51:12,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:12,437 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:12,437 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:12,437 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:12,438 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-06 23:51:12,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:12,895 INFO L263 TraceCheckSpWp]: Trace formula consists of 966 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-06 23:51:12,897 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:13,641 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-06 23:51:13,641 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 23:51:15,653 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2021-12-06 23:51:15,653 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:15,654 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1099911095] [2021-12-06 23:51:15,654 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1099911095] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 23:51:15,654 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 23:51:15,654 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 13 [2021-12-06 23:51:15,654 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1437123702] [2021-12-06 23:51:15,654 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 23:51:15,654 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 23:51:15,654 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:15,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 23:51:15,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2021-12-06 23:51:15,655 INFO L87 Difference]: Start difference. First operand 3102 states and 4536 transitions. Second operand has 13 states, 11 states have (on average 6.454545454545454) internal successors, (71), 13 states have internal predecessors, (71), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 23:51:17,749 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:17,749 INFO L93 Difference]: Finished difference Result 6209 states and 9093 transitions. [2021-12-06 23:51:17,751 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 23:51:17,751 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 6.454545454545454) internal successors, (71), 13 states have internal predecessors, (71), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 118 [2021-12-06 23:51:17,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:17,771 INFO L225 Difference]: With dead ends: 6209 [2021-12-06 23:51:17,771 INFO L226 Difference]: Without dead ends: 3116 [2021-12-06 23:51:17,782 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 238 GetRequests, 223 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2021-12-06 23:51:17,783 INFO L933 BasicCegarLoop]: 2260 mSDtfsCounter, 25 mSDsluCounter, 15784 mSDsCounter, 0 mSdLazyCounter, 193 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 18044 SdHoareTripleChecker+Invalid, 199 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 193 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:17,783 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 18044 Invalid, 199 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 193 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2021-12-06 23:51:17,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3116 states. [2021-12-06 23:51:17,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3116 to 3103. [2021-12-06 23:51:17,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3103 states, 2183 states have (on average 1.3893724232707283) internal successors, (3033), 2291 states have internal predecessors, (3033), 735 states have call successors, (735), 184 states have call predecessors, (735), 184 states have return successors, (770), 679 states have call predecessors, (770), 731 states have call successors, (770) [2021-12-06 23:51:17,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3103 states to 3103 states and 4538 transitions. [2021-12-06 23:51:17,900 INFO L78 Accepts]: Start accepts. Automaton has 3103 states and 4538 transitions. Word has length 118 [2021-12-06 23:51:17,901 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:17,901 INFO L470 AbstractCegarLoop]: Abstraction has 3103 states and 4538 transitions. [2021-12-06 23:51:17,901 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 6.454545454545454) internal successors, (71), 13 states have internal predecessors, (71), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 23:51:17,901 INFO L276 IsEmpty]: Start isEmpty. Operand 3103 states and 4538 transitions. [2021-12-06 23:51:17,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2021-12-06 23:51:17,904 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:17,904 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:17,921 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Ended with exit code 0 [2021-12-06 23:51:18,104 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:18,105 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:18,105 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:18,105 INFO L85 PathProgramCache]: Analyzing trace with hash 615904384, now seen corresponding path program 2 times [2021-12-06 23:51:18,106 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:18,106 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2111083178] [2021-12-06 23:51:18,106 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 23:51:18,106 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:18,106 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:18,107 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:18,107 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-06 23:51:18,445 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 23:51:18,446 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 23:51:18,461 INFO L263 TraceCheckSpWp]: Trace formula consists of 743 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:51:18,463 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:20,068 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-12-06 23:51:20,068 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:20,068 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:20,068 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2111083178] [2021-12-06 23:51:20,069 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2111083178] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:20,069 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:20,069 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:51:20,069 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1362355555] [2021-12-06 23:51:20,069 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:20,069 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:51:20,070 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:20,070 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:51:20,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:20,070 INFO L87 Difference]: Start difference. First operand 3103 states and 4538 transitions. Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:51:20,232 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:20,232 INFO L93 Difference]: Finished difference Result 8900 states and 13260 transitions. [2021-12-06 23:51:20,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:51:20,233 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 120 [2021-12-06 23:51:20,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:20,262 INFO L225 Difference]: With dead ends: 8900 [2021-12-06 23:51:20,263 INFO L226 Difference]: Without dead ends: 5820 [2021-12-06 23:51:20,296 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:20,297 INFO L933 BasicCegarLoop]: 2593 mSDtfsCounter, 1944 mSDsluCounter, 2228 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1944 SdHoareTripleChecker+Valid, 4821 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:20,297 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1944 Valid, 4821 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:51:20,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5820 states. [2021-12-06 23:51:20,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5820 to 5808. [2021-12-06 23:51:20,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5808 states, 4086 states have (on average 1.3952520802741066) internal successors, (5701), 4296 states have internal predecessors, (5701), 1371 states have call successors, (1371), 350 states have call predecessors, (1371), 350 states have return successors, (1439), 1263 states have call predecessors, (1439), 1367 states have call successors, (1439) [2021-12-06 23:51:20,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5808 states to 5808 states and 8511 transitions. [2021-12-06 23:51:20,577 INFO L78 Accepts]: Start accepts. Automaton has 5808 states and 8511 transitions. Word has length 120 [2021-12-06 23:51:20,578 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:20,578 INFO L470 AbstractCegarLoop]: Abstraction has 5808 states and 8511 transitions. [2021-12-06 23:51:20,578 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:51:20,578 INFO L276 IsEmpty]: Start isEmpty. Operand 5808 states and 8511 transitions. [2021-12-06 23:51:20,580 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-12-06 23:51:20,580 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:20,580 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:20,595 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-12-06 23:51:20,781 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:20,781 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:20,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:20,781 INFO L85 PathProgramCache]: Analyzing trace with hash 1912625765, now seen corresponding path program 1 times [2021-12-06 23:51:20,782 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:20,782 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2028640077] [2021-12-06 23:51:20,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:20,782 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:20,783 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:20,783 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:20,784 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-12-06 23:51:21,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:21,284 INFO L263 TraceCheckSpWp]: Trace formula consists of 989 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 23:51:21,287 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:22,176 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 24 proven. 6 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2021-12-06 23:51:22,177 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 23:51:24,640 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2021-12-06 23:51:24,640 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:24,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2028640077] [2021-12-06 23:51:24,640 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2028640077] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 23:51:24,640 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 23:51:24,641 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2021-12-06 23:51:24,641 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [503453461] [2021-12-06 23:51:24,641 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 23:51:24,641 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-06 23:51:24,641 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:24,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-06 23:51:24,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=165, Unknown=0, NotChecked=0, Total=210 [2021-12-06 23:51:24,642 INFO L87 Difference]: Start difference. First operand 5808 states and 8511 transitions. Second operand has 15 states, 13 states have (on average 5.6923076923076925) internal successors, (74), 15 states have internal predecessors, (74), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 23:51:27,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:27,475 INFO L93 Difference]: Finished difference Result 11650 states and 17111 transitions. [2021-12-06 23:51:27,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-06 23:51:27,477 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 5.6923076923076925) internal successors, (74), 15 states have internal predecessors, (74), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 121 [2021-12-06 23:51:27,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:27,507 INFO L225 Difference]: With dead ends: 11650 [2021-12-06 23:51:27,507 INFO L226 Difference]: Without dead ends: 5851 [2021-12-06 23:51:27,525 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 245 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=83, Invalid=297, Unknown=0, NotChecked=0, Total=380 [2021-12-06 23:51:27,525 INFO L933 BasicCegarLoop]: 2261 mSDtfsCounter, 34 mSDsluCounter, 18049 mSDsCounter, 0 mSdLazyCounter, 272 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 20310 SdHoareTripleChecker+Invalid, 282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 272 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:27,525 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [36 Valid, 20310 Invalid, 282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 272 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2021-12-06 23:51:27,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5851 states. [2021-12-06 23:51:27,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5851 to 5809. [2021-12-06 23:51:27,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5809 states, 4087 states have (on average 1.3954000489356497) internal successors, (5703), 4297 states have internal predecessors, (5703), 1371 states have call successors, (1371), 350 states have call predecessors, (1371), 350 states have return successors, (1439), 1263 states have call predecessors, (1439), 1367 states have call successors, (1439) [2021-12-06 23:51:27,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5809 states to 5809 states and 8513 transitions. [2021-12-06 23:51:27,703 INFO L78 Accepts]: Start accepts. Automaton has 5809 states and 8513 transitions. Word has length 121 [2021-12-06 23:51:27,703 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:27,703 INFO L470 AbstractCegarLoop]: Abstraction has 5809 states and 8513 transitions. [2021-12-06 23:51:27,704 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 5.6923076923076925) internal successors, (74), 15 states have internal predecessors, (74), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 23:51:27,704 INFO L276 IsEmpty]: Start isEmpty. Operand 5809 states and 8513 transitions. [2021-12-06 23:51:27,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-12-06 23:51:27,706 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:27,706 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:27,727 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Ended with exit code 0 [2021-12-06 23:51:27,906 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:27,907 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:27,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:27,907 INFO L85 PathProgramCache]: Analyzing trace with hash -1080283577, now seen corresponding path program 2 times [2021-12-06 23:51:27,908 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:27,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1217482841] [2021-12-06 23:51:27,908 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 23:51:27,909 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:27,909 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:27,909 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:27,921 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-12-06 23:51:28,362 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 23:51:28,362 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 23:51:28,377 INFO L263 TraceCheckSpWp]: Trace formula consists of 744 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:51:28,380 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:30,020 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-06 23:51:30,020 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:30,020 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:30,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1217482841] [2021-12-06 23:51:30,021 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1217482841] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:30,021 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:30,021 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:51:30,021 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1996854044] [2021-12-06 23:51:30,021 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:30,022 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:51:30,022 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:30,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:51:30,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:30,023 INFO L87 Difference]: Start difference. First operand 5809 states and 8513 transitions. Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:51:30,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:30,124 INFO L93 Difference]: Finished difference Result 5811 states and 8514 transitions. [2021-12-06 23:51:30,125 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:51:30,125 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 123 [2021-12-06 23:51:30,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:30,151 INFO L225 Difference]: With dead ends: 5811 [2021-12-06 23:51:30,151 INFO L226 Difference]: Without dead ends: 5808 [2021-12-06 23:51:30,154 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:30,154 INFO L933 BasicCegarLoop]: 2264 mSDtfsCounter, 2199 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2199 SdHoareTripleChecker+Valid, 2264 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:30,155 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2199 Valid, 2264 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:51:30,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5808 states. [2021-12-06 23:51:30,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5808 to 5808. [2021-12-06 23:51:30,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5808 states, 4087 states have (on average 1.395155370687546) internal successors, (5702), 4296 states have internal predecessors, (5702), 1370 states have call successors, (1370), 350 states have call predecessors, (1370), 350 states have return successors, (1439), 1263 states have call predecessors, (1439), 1367 states have call successors, (1439) [2021-12-06 23:51:30,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5808 states to 5808 states and 8511 transitions. [2021-12-06 23:51:30,336 INFO L78 Accepts]: Start accepts. Automaton has 5808 states and 8511 transitions. Word has length 123 [2021-12-06 23:51:30,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:30,337 INFO L470 AbstractCegarLoop]: Abstraction has 5808 states and 8511 transitions. [2021-12-06 23:51:30,337 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:51:30,337 INFO L276 IsEmpty]: Start isEmpty. Operand 5808 states and 8511 transitions. [2021-12-06 23:51:30,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-12-06 23:51:30,339 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:30,339 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:30,356 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2021-12-06 23:51:30,539 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:30,540 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:30,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:30,540 INFO L85 PathProgramCache]: Analyzing trace with hash 870411393, now seen corresponding path program 1 times [2021-12-06 23:51:30,541 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:30,541 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2067985359] [2021-12-06 23:51:30,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:30,541 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:30,541 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:30,542 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:30,542 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-12-06 23:51:31,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:31,073 INFO L263 TraceCheckSpWp]: Trace formula consists of 1012 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:51:31,075 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:32,675 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-06 23:51:32,675 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:32,676 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:32,676 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2067985359] [2021-12-06 23:51:32,676 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2067985359] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:32,676 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:32,676 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:51:32,676 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1794631230] [2021-12-06 23:51:32,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:32,676 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:51:32,677 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:32,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:51:32,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:32,677 INFO L87 Difference]: Start difference. First operand 5808 states and 8511 transitions. Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:51:32,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:32,778 INFO L93 Difference]: Finished difference Result 5810 states and 8512 transitions. [2021-12-06 23:51:32,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:51:32,778 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 124 [2021-12-06 23:51:32,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:32,802 INFO L225 Difference]: With dead ends: 5810 [2021-12-06 23:51:32,802 INFO L226 Difference]: Without dead ends: 5778 [2021-12-06 23:51:32,804 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 122 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:32,805 INFO L933 BasicCegarLoop]: 2263 mSDtfsCounter, 2196 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2196 SdHoareTripleChecker+Valid, 2263 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:32,805 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2196 Valid, 2263 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:51:32,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5778 states. [2021-12-06 23:51:32,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5778 to 5778. [2021-12-06 23:51:32,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5778 states, 4071 states have (on average 1.395725865880619) internal successors, (5682), 4279 states have internal predecessors, (5682), 1357 states have call successors, (1357), 349 states have call predecessors, (1357), 349 states have return successors, (1427), 1251 states have call predecessors, (1427), 1355 states have call successors, (1427) [2021-12-06 23:51:32,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5778 states to 5778 states and 8466 transitions. [2021-12-06 23:51:32,985 INFO L78 Accepts]: Start accepts. Automaton has 5778 states and 8466 transitions. Word has length 124 [2021-12-06 23:51:32,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:32,985 INFO L470 AbstractCegarLoop]: Abstraction has 5778 states and 8466 transitions. [2021-12-06 23:51:32,985 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 23:51:32,985 INFO L276 IsEmpty]: Start isEmpty. Operand 5778 states and 8466 transitions. [2021-12-06 23:51:32,992 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 175 [2021-12-06 23:51:32,993 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:32,993 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:33,008 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Ended with exit code 0 [2021-12-06 23:51:33,193 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:33,193 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:33,194 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:33,194 INFO L85 PathProgramCache]: Analyzing trace with hash -1073965636, now seen corresponding path program 1 times [2021-12-06 23:51:33,195 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:33,195 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1008715496] [2021-12-06 23:51:33,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:33,195 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:33,195 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:33,196 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:33,196 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-12-06 23:51:33,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:33,887 INFO L263 TraceCheckSpWp]: Trace formula consists of 1333 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:51:33,890 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:34,509 INFO L134 CoverageAnalysis]: Checked inductivity of 152 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2021-12-06 23:51:34,510 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:34,510 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:34,510 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1008715496] [2021-12-06 23:51:34,510 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1008715496] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:34,510 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:34,510 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:51:34,510 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1803615119] [2021-12-06 23:51:34,510 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:34,511 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:51:34,511 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:34,511 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:51:34,511 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:34,511 INFO L87 Difference]: Start difference. First operand 5778 states and 8466 transitions. Second operand has 3 states, 3 states have (on average 26.666666666666668) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 23:51:35,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:35,041 INFO L93 Difference]: Finished difference Result 16681 states and 24440 transitions. [2021-12-06 23:51:35,042 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:51:35,042 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.666666666666668) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 174 [2021-12-06 23:51:35,043 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:35,083 INFO L225 Difference]: With dead ends: 16681 [2021-12-06 23:51:35,083 INFO L226 Difference]: Without dead ends: 10926 [2021-12-06 23:51:35,101 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 172 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:35,101 INFO L933 BasicCegarLoop]: 2684 mSDtfsCounter, 1924 mSDsluCounter, 2176 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1924 SdHoareTripleChecker+Valid, 4860 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:35,102 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1924 Valid, 4860 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 23:51:35,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10926 states. [2021-12-06 23:51:35,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10926 to 10902. [2021-12-06 23:51:35,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10902 states, 7675 states have (on average 1.3985667752442996) internal successors, (10734), 8087 states have internal predecessors, (10734), 2549 states have call successors, (2549), 677 states have call predecessors, (2549), 677 states have return successors, (2685), 2339 states have call predecessors, (2685), 2547 states have call successors, (2685) [2021-12-06 23:51:35,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10902 states to 10902 states and 15968 transitions. [2021-12-06 23:51:35,452 INFO L78 Accepts]: Start accepts. Automaton has 10902 states and 15968 transitions. Word has length 174 [2021-12-06 23:51:35,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:35,453 INFO L470 AbstractCegarLoop]: Abstraction has 10902 states and 15968 transitions. [2021-12-06 23:51:35,453 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.666666666666668) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 23:51:35,453 INFO L276 IsEmpty]: Start isEmpty. Operand 10902 states and 15968 transitions. [2021-12-06 23:51:35,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2021-12-06 23:51:35,467 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:35,467 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:35,493 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Ended with exit code 0 [2021-12-06 23:51:35,667 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:35,668 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:35,668 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:35,668 INFO L85 PathProgramCache]: Analyzing trace with hash 1555787969, now seen corresponding path program 1 times [2021-12-06 23:51:35,669 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:35,669 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1803713702] [2021-12-06 23:51:35,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:35,669 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:35,669 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:35,670 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:35,671 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-12-06 23:51:36,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:36,427 INFO L263 TraceCheckSpWp]: Trace formula consists of 1485 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 23:51:36,430 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:37,051 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 209 trivial. 0 not checked. [2021-12-06 23:51:37,052 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:37,052 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:37,052 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1803713702] [2021-12-06 23:51:37,052 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1803713702] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:37,052 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:37,052 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:51:37,052 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1379523533] [2021-12-06 23:51:37,053 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:37,053 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 23:51:37,053 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:37,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:51:37,054 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:51:37,054 INFO L87 Difference]: Start difference. First operand 10902 states and 15968 transitions. Second operand has 4 states, 4 states have (on average 25.5) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 23:51:38,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:38,856 INFO L93 Difference]: Finished difference Result 24094 states and 35708 transitions. [2021-12-06 23:51:38,856 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 23:51:38,857 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 25.5) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 212 [2021-12-06 23:51:38,857 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:38,911 INFO L225 Difference]: With dead ends: 24094 [2021-12-06 23:51:38,912 INFO L226 Difference]: Without dead ends: 13215 [2021-12-06 23:51:38,932 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 210 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:51:38,932 INFO L933 BasicCegarLoop]: 2585 mSDtfsCounter, 3032 mSDsluCounter, 2323 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3032 SdHoareTripleChecker+Valid, 4908 SdHoareTripleChecker+Invalid, 300 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 177 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:38,932 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3032 Valid, 4908 Invalid, 300 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [177 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-12-06 23:51:38,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13215 states. [2021-12-06 23:51:39,268 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13215 to 10916. [2021-12-06 23:51:39,275 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10916 states, 7689 states have (on average 1.397841071660814) internal successors, (10748), 8101 states have internal predecessors, (10748), 2549 states have call successors, (2549), 677 states have call predecessors, (2549), 677 states have return successors, (2685), 2339 states have call predecessors, (2685), 2547 states have call successors, (2685) [2021-12-06 23:51:39,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10916 states to 10916 states and 15982 transitions. [2021-12-06 23:51:39,310 INFO L78 Accepts]: Start accepts. Automaton has 10916 states and 15982 transitions. Word has length 212 [2021-12-06 23:51:39,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:39,310 INFO L470 AbstractCegarLoop]: Abstraction has 10916 states and 15982 transitions. [2021-12-06 23:51:39,310 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 25.5) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 23:51:39,311 INFO L276 IsEmpty]: Start isEmpty. Operand 10916 states and 15982 transitions. [2021-12-06 23:51:39,323 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 230 [2021-12-06 23:51:39,324 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:39,324 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:39,351 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Ended with exit code 0 [2021-12-06 23:51:39,524 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:39,524 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:39,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:39,525 INFO L85 PathProgramCache]: Analyzing trace with hash 672057816, now seen corresponding path program 1 times [2021-12-06 23:51:39,526 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:39,526 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [579054332] [2021-12-06 23:51:39,526 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:39,526 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:39,526 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:39,527 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:39,527 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-12-06 23:51:40,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:40,377 INFO L263 TraceCheckSpWp]: Trace formula consists of 1535 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-06 23:51:40,382 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:41,177 INFO L134 CoverageAnalysis]: Checked inductivity of 296 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 274 trivial. 0 not checked. [2021-12-06 23:51:41,177 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:41,177 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:41,177 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [579054332] [2021-12-06 23:51:41,177 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [579054332] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:41,178 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:41,178 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:51:41,178 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1478357180] [2021-12-06 23:51:41,178 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:41,178 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:51:41,179 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:41,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:51:41,179 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:51:41,179 INFO L87 Difference]: Start difference. First operand 10916 states and 15982 transitions. Second operand has 5 states, 5 states have (on average 21.4) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 23:51:41,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:41,923 INFO L93 Difference]: Finished difference Result 16593 states and 24305 transitions. [2021-12-06 23:51:41,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:51:41,924 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 229 [2021-12-06 23:51:41,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:41,958 INFO L225 Difference]: With dead ends: 16593 [2021-12-06 23:51:41,958 INFO L226 Difference]: Without dead ends: 10952 [2021-12-06 23:51:41,972 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 229 GetRequests, 225 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:51:41,972 INFO L933 BasicCegarLoop]: 2263 mSDtfsCounter, 1 mSDsluCounter, 6779 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 9042 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:41,972 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 9042 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 23:51:41,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10952 states. [2021-12-06 23:51:42,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10952 to 10932. [2021-12-06 23:51:42,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10932 states, 7701 states have (on average 1.3972211401116739) internal successors, (10760), 8113 states have internal predecessors, (10760), 2549 states have call successors, (2549), 677 states have call predecessors, (2549), 681 states have return successors, (2703), 2343 states have call predecessors, (2703), 2547 states have call successors, (2703) [2021-12-06 23:51:42,317 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10932 states to 10932 states and 16012 transitions. [2021-12-06 23:51:42,319 INFO L78 Accepts]: Start accepts. Automaton has 10932 states and 16012 transitions. Word has length 229 [2021-12-06 23:51:42,319 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:42,319 INFO L470 AbstractCegarLoop]: Abstraction has 10932 states and 16012 transitions. [2021-12-06 23:51:42,319 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 23:51:42,319 INFO L276 IsEmpty]: Start isEmpty. Operand 10932 states and 16012 transitions. [2021-12-06 23:51:42,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 236 [2021-12-06 23:51:42,332 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:42,333 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:42,361 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Ended with exit code 0 [2021-12-06 23:51:42,533 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:42,534 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:42,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:42,536 INFO L85 PathProgramCache]: Analyzing trace with hash 355410478, now seen corresponding path program 1 times [2021-12-06 23:51:42,539 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:42,539 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1584628496] [2021-12-06 23:51:42,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:42,540 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:42,541 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:42,543 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:42,545 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-12-06 23:51:43,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:43,537 INFO L263 TraceCheckSpWp]: Trace formula consists of 1552 conjuncts, 17 conjunts are in the unsatisfiable core [2021-12-06 23:51:43,541 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:44,771 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 300 trivial. 0 not checked. [2021-12-06 23:51:44,771 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:44,771 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:44,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1584628496] [2021-12-06 23:51:44,771 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1584628496] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:44,771 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:44,772 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 23:51:44,772 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [811113264] [2021-12-06 23:51:44,772 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:44,772 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 23:51:44,773 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:44,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 23:51:44,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:51:44,773 INFO L87 Difference]: Start difference. First operand 10932 states and 16012 transitions. Second operand has 9 states, 8 states have (on average 13.375) internal successors, (107), 7 states have internal predecessors, (107), 3 states have call successors, (20), 2 states have call predecessors, (20), 4 states have return successors, (19), 4 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 23:51:45,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:45,940 INFO L93 Difference]: Finished difference Result 15194 states and 22441 transitions. [2021-12-06 23:51:45,940 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 23:51:45,941 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 13.375) internal successors, (107), 7 states have internal predecessors, (107), 3 states have call successors, (20), 2 states have call predecessors, (20), 4 states have return successors, (19), 4 states have call predecessors, (19), 2 states have call successors, (19) Word has length 235 [2021-12-06 23:51:45,941 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:45,980 INFO L225 Difference]: With dead ends: 15194 [2021-12-06 23:51:45,980 INFO L226 Difference]: Without dead ends: 12367 [2021-12-06 23:51:45,989 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-06 23:51:45,990 INFO L933 BasicCegarLoop]: 2939 mSDtfsCounter, 491 mSDsluCounter, 19975 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 611 SdHoareTripleChecker+Valid, 22914 SdHoareTripleChecker+Invalid, 97 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:45,990 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [611 Valid, 22914 Invalid, 97 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-06 23:51:45,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12367 states. [2021-12-06 23:51:46,310 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12367 to 10950. [2021-12-06 23:51:46,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10950 states, 7711 states have (on average 1.3967060044092854) internal successors, (10770), 8127 states have internal predecessors, (10770), 2551 states have call successors, (2551), 677 states have call predecessors, (2551), 687 states have return successors, (2717), 2347 states have call predecessors, (2717), 2549 states have call successors, (2717) [2021-12-06 23:51:46,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10950 states to 10950 states and 16038 transitions. [2021-12-06 23:51:46,351 INFO L78 Accepts]: Start accepts. Automaton has 10950 states and 16038 transitions. Word has length 235 [2021-12-06 23:51:46,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:46,351 INFO L470 AbstractCegarLoop]: Abstraction has 10950 states and 16038 transitions. [2021-12-06 23:51:46,351 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 13.375) internal successors, (107), 7 states have internal predecessors, (107), 3 states have call successors, (20), 2 states have call predecessors, (20), 4 states have return successors, (19), 4 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 23:51:46,351 INFO L276 IsEmpty]: Start isEmpty. Operand 10950 states and 16038 transitions. [2021-12-06 23:51:46,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2021-12-06 23:51:46,364 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:46,364 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:46,391 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Ended with exit code 0 [2021-12-06 23:51:46,564 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:46,565 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:46,566 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:46,566 INFO L85 PathProgramCache]: Analyzing trace with hash -1166123018, now seen corresponding path program 1 times [2021-12-06 23:51:46,570 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:46,570 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1015970778] [2021-12-06 23:51:46,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:46,571 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:46,571 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:46,573 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:46,576 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-12-06 23:51:47,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:47,539 INFO L263 TraceCheckSpWp]: Trace formula consists of 1552 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 23:51:47,542 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:47,965 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-12-06 23:51:47,966 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:47,966 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:47,966 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1015970778] [2021-12-06 23:51:47,966 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1015970778] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:47,966 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:47,966 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:51:47,967 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1773546244] [2021-12-06 23:51:47,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:47,967 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:51:47,968 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:47,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:51:47,968 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:51:47,968 INFO L87 Difference]: Start difference. First operand 10950 states and 16038 transitions. Second operand has 5 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-12-06 23:51:50,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:50,788 INFO L93 Difference]: Finished difference Result 22316 states and 32676 transitions. [2021-12-06 23:51:50,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:51:50,789 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) Word has length 236 [2021-12-06 23:51:50,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:50,838 INFO L225 Difference]: With dead ends: 22316 [2021-12-06 23:51:50,838 INFO L226 Difference]: Without dead ends: 16653 [2021-12-06 23:51:50,856 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 234 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 23:51:50,857 INFO L933 BasicCegarLoop]: 4365 mSDtfsCounter, 2927 mSDsluCounter, 10113 mSDsCounter, 0 mSdLazyCounter, 164 mSolverCounterSat, 272 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2948 SdHoareTripleChecker+Valid, 14478 SdHoareTripleChecker+Invalid, 436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 272 IncrementalHoareTripleChecker+Valid, 164 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:50,857 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2948 Valid, 14478 Invalid, 436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [272 Valid, 164 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2021-12-06 23:51:50,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16653 states. [2021-12-06 23:51:51,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16653 to 10972. [2021-12-06 23:51:51,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10972 states, 7725 states have (on average 1.3959870550161813) internal successors, (10784), 8141 states have internal predecessors, (10784), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 687 states have return successors, (2725), 2355 states have call predecessors, (2725), 2557 states have call successors, (2725) [2021-12-06 23:51:51,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10972 states to 10972 states and 16068 transitions. [2021-12-06 23:51:51,327 INFO L78 Accepts]: Start accepts. Automaton has 10972 states and 16068 transitions. Word has length 236 [2021-12-06 23:51:51,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:51,327 INFO L470 AbstractCegarLoop]: Abstraction has 10972 states and 16068 transitions. [2021-12-06 23:51:51,327 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-12-06 23:51:51,327 INFO L276 IsEmpty]: Start isEmpty. Operand 10972 states and 16068 transitions. [2021-12-06 23:51:51,338 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2021-12-06 23:51:51,338 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:51,339 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:51,358 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-12-06 23:51:51,539 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:51,540 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:51,541 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:51,541 INFO L85 PathProgramCache]: Analyzing trace with hash 1323405944, now seen corresponding path program 1 times [2021-12-06 23:51:51,544 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:51,545 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [358969893] [2021-12-06 23:51:51,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:51,546 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:51,546 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:51,546 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:51,548 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-12-06 23:51:52,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:52,448 INFO L263 TraceCheckSpWp]: Trace formula consists of 1550 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:51:52,451 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:53,740 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 108 proven. 0 refuted. 0 times theorem prover too weak. 212 trivial. 0 not checked. [2021-12-06 23:51:53,740 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:53,740 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:53,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [358969893] [2021-12-06 23:51:53,740 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [358969893] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:53,740 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:53,741 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:51:53,741 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1671769774] [2021-12-06 23:51:53,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:53,741 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:51:53,741 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:53,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:51:53,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:53,742 INFO L87 Difference]: Start difference. First operand 10972 states and 16068 transitions. Second operand has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 3 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-06 23:51:54,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:54,535 INFO L93 Difference]: Finished difference Result 32416 states and 47500 transitions. [2021-12-06 23:51:54,536 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:51:54,536 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 3 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) Word has length 236 [2021-12-06 23:51:54,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:54,592 INFO L225 Difference]: With dead ends: 32416 [2021-12-06 23:51:54,592 INFO L226 Difference]: Without dead ends: 21467 [2021-12-06 23:51:54,617 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 234 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:51:54,617 INFO L933 BasicCegarLoop]: 3966 mSDtfsCounter, 2107 mSDsluCounter, 2212 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2107 SdHoareTripleChecker+Valid, 6178 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:54,617 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2107 Valid, 6178 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:51:54,632 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21467 states. [2021-12-06 23:51:55,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21467 to 21461. [2021-12-06 23:51:55,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21461 states, 15137 states have (on average 1.3973706811125057) internal successors, (21152), 15947 states have internal predecessors, (21152), 4975 states have call successors, (4975), 1328 states have call predecessors, (4975), 1348 states have return successors, (5305), 4569 states have call predecessors, (5305), 4973 states have call successors, (5305) [2021-12-06 23:51:55,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21461 states to 21461 states and 31432 transitions. [2021-12-06 23:51:55,336 INFO L78 Accepts]: Start accepts. Automaton has 21461 states and 31432 transitions. Word has length 236 [2021-12-06 23:51:55,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:55,337 INFO L470 AbstractCegarLoop]: Abstraction has 21461 states and 31432 transitions. [2021-12-06 23:51:55,337 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 3 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-06 23:51:55,337 INFO L276 IsEmpty]: Start isEmpty. Operand 21461 states and 31432 transitions. [2021-12-06 23:51:55,361 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 263 [2021-12-06 23:51:55,361 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:55,361 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:55,381 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-12-06 23:51:55,562 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:55,563 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:55,564 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:55,564 INFO L85 PathProgramCache]: Analyzing trace with hash 670401594, now seen corresponding path program 1 times [2021-12-06 23:51:55,567 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:55,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [177978382] [2021-12-06 23:51:55,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:55,569 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:55,569 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:55,571 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:55,573 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-12-06 23:51:56,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:51:56,411 INFO L263 TraceCheckSpWp]: Trace formula consists of 1635 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 23:51:56,414 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:51:57,371 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 238 trivial. 0 not checked. [2021-12-06 23:51:57,372 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:51:57,372 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:51:57,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [177978382] [2021-12-06 23:51:57,372 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [177978382] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:51:57,372 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:51:57,372 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:51:57,372 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1867223458] [2021-12-06 23:51:57,372 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:51:57,373 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:51:57,373 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:51:57,373 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:51:57,373 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:51:57,374 INFO L87 Difference]: Start difference. First operand 21461 states and 31432 transitions. Second operand has 5 states, 5 states have (on average 24.6) internal successors, (123), 5 states have internal predecessors, (123), 3 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) [2021-12-06 23:51:58,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:51:58,163 INFO L93 Difference]: Finished difference Result 34898 states and 51048 transitions. [2021-12-06 23:51:58,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:51:58,164 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 24.6) internal successors, (123), 5 states have internal predecessors, (123), 3 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) Word has length 262 [2021-12-06 23:51:58,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:51:58,208 INFO L225 Difference]: With dead ends: 34898 [2021-12-06 23:51:58,208 INFO L226 Difference]: Without dead ends: 13281 [2021-12-06 23:51:58,254 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 258 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:51:58,254 INFO L933 BasicCegarLoop]: 2257 mSDtfsCounter, 15 mSDsluCounter, 6748 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 9005 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 23:51:58,255 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 9005 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 23:51:58,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13281 states. [2021-12-06 23:51:58,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13281 to 13271. [2021-12-06 23:51:58,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13271 states, 9348 states have (on average 1.3949507916131794) internal successors, (13040), 9851 states have internal predecessors, (13040), 3077 states have call successors, (3077), 834 states have call predecessors, (3077), 845 states have return successors, (3277), 2819 states have call predecessors, (3277), 3075 states have call successors, (3277) [2021-12-06 23:51:58,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13271 states to 13271 states and 19394 transitions. [2021-12-06 23:51:58,782 INFO L78 Accepts]: Start accepts. Automaton has 13271 states and 19394 transitions. Word has length 262 [2021-12-06 23:51:58,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:51:58,782 INFO L470 AbstractCegarLoop]: Abstraction has 13271 states and 19394 transitions. [2021-12-06 23:51:58,783 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 24.6) internal successors, (123), 5 states have internal predecessors, (123), 3 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) [2021-12-06 23:51:58,783 INFO L276 IsEmpty]: Start isEmpty. Operand 13271 states and 19394 transitions. [2021-12-06 23:51:58,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 291 [2021-12-06 23:51:58,802 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:51:58,802 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:51:58,822 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (17)] Ended with exit code 0 [2021-12-06 23:51:59,003 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:51:59,004 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:51:59,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:51:59,005 INFO L85 PathProgramCache]: Analyzing trace with hash 1317793432, now seen corresponding path program 1 times [2021-12-06 23:51:59,009 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:51:59,009 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1697585781] [2021-12-06 23:51:59,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:51:59,010 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:51:59,010 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:51:59,012 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:51:59,015 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-12-06 23:52:00,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:52:00,436 INFO L263 TraceCheckSpWp]: Trace formula consists of 1777 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:52:00,439 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:52:01,779 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-06 23:52:01,779 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:52:01,780 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:52:01,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1697585781] [2021-12-06 23:52:01,780 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1697585781] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:52:01,780 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:52:01,780 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:52:01,780 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1235579619] [2021-12-06 23:52:01,780 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:52:01,781 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:52:01,781 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:52:01,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:52:01,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:52:01,781 INFO L87 Difference]: Start difference. First operand 13271 states and 19394 transitions. Second operand has 3 states, 3 states have (on average 54.0) internal successors, (162), 3 states have internal predecessors, (162), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:52:02,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:52:02,264 INFO L93 Difference]: Finished difference Result 26489 states and 38714 transitions. [2021-12-06 23:52:02,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:52:02,265 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 54.0) internal successors, (162), 3 states have internal predecessors, (162), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 290 [2021-12-06 23:52:02,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:52:02,302 INFO L225 Difference]: With dead ends: 26489 [2021-12-06 23:52:02,302 INFO L226 Difference]: Without dead ends: 13251 [2021-12-06 23:52:02,328 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 288 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:52:02,329 INFO L933 BasicCegarLoop]: 2256 mSDtfsCounter, 2244 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2244 SdHoareTripleChecker+Valid, 2256 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:52:02,329 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2244 Valid, 2256 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:52:02,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13251 states. [2021-12-06 23:52:02,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13251 to 13251. [2021-12-06 23:52:02,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13251 states, 9338 states have (on average 1.394302848575712) internal successors, (13020), 9841 states have internal predecessors, (13020), 3067 states have call successors, (3067), 834 states have call predecessors, (3067), 845 states have return successors, (3262), 2809 states have call predecessors, (3262), 3065 states have call successors, (3262) [2021-12-06 23:52:02,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13251 states to 13251 states and 19349 transitions. [2021-12-06 23:52:02,869 INFO L78 Accepts]: Start accepts. Automaton has 13251 states and 19349 transitions. Word has length 290 [2021-12-06 23:52:02,869 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:52:02,869 INFO L470 AbstractCegarLoop]: Abstraction has 13251 states and 19349 transitions. [2021-12-06 23:52:02,869 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 54.0) internal successors, (162), 3 states have internal predecessors, (162), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:52:02,869 INFO L276 IsEmpty]: Start isEmpty. Operand 13251 states and 19349 transitions. [2021-12-06 23:52:02,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 289 [2021-12-06 23:52:02,894 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:52:02,894 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:52:02,915 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (18)] Ended with exit code 0 [2021-12-06 23:52:03,095 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:52:03,096 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:52:03,097 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:52:03,097 INFO L85 PathProgramCache]: Analyzing trace with hash -372139879, now seen corresponding path program 1 times [2021-12-06 23:52:03,102 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:52:03,102 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [477606427] [2021-12-06 23:52:03,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:52:03,103 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:52:03,104 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:52:03,106 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:52:03,109 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (19)] Waiting until timeout for monitored process [2021-12-06 23:52:04,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:52:04,068 INFO L263 TraceCheckSpWp]: Trace formula consists of 1773 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:52:04,073 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:52:05,463 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-06 23:52:05,463 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:52:05,463 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:52:05,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [477606427] [2021-12-06 23:52:05,463 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [477606427] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:52:05,464 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:52:05,464 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:52:05,464 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [809871166] [2021-12-06 23:52:05,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:52:05,465 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:52:05,465 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:52:05,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:52:05,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:52:05,465 INFO L87 Difference]: Start difference. First operand 13251 states and 19349 transitions. Second operand has 3 states, 3 states have (on average 53.333333333333336) internal successors, (160), 3 states have internal predecessors, (160), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:52:06,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:52:06,002 INFO L93 Difference]: Finished difference Result 26449 states and 38624 transitions. [2021-12-06 23:52:06,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:52:06,003 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 53.333333333333336) internal successors, (160), 3 states have internal predecessors, (160), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 288 [2021-12-06 23:52:06,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:52:06,037 INFO L225 Difference]: With dead ends: 26449 [2021-12-06 23:52:06,037 INFO L226 Difference]: Without dead ends: 13231 [2021-12-06 23:52:06,060 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 287 GetRequests, 286 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:52:06,061 INFO L933 BasicCegarLoop]: 2252 mSDtfsCounter, 2242 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2242 SdHoareTripleChecker+Valid, 2252 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:52:06,061 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2242 Valid, 2252 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:52:06,068 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13231 states. [2021-12-06 23:52:06,504 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13231 to 13231. [2021-12-06 23:52:06,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13231 states, 9328 states have (on average 1.3936535162950257) internal successors, (13000), 9831 states have internal predecessors, (13000), 3057 states have call successors, (3057), 834 states have call predecessors, (3057), 845 states have return successors, (3247), 2799 states have call predecessors, (3247), 3055 states have call successors, (3247) [2021-12-06 23:52:06,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13231 states to 13231 states and 19304 transitions. [2021-12-06 23:52:06,548 INFO L78 Accepts]: Start accepts. Automaton has 13231 states and 19304 transitions. Word has length 288 [2021-12-06 23:52:06,549 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:52:06,549 INFO L470 AbstractCegarLoop]: Abstraction has 13231 states and 19304 transitions. [2021-12-06 23:52:06,549 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 53.333333333333336) internal successors, (160), 3 states have internal predecessors, (160), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:52:06,549 INFO L276 IsEmpty]: Start isEmpty. Operand 13231 states and 19304 transitions. [2021-12-06 23:52:06,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 290 [2021-12-06 23:52:06,567 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:52:06,567 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:52:06,590 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (19)] Ended with exit code 0 [2021-12-06 23:52:06,768 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:52:06,769 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:52:06,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:52:06,770 INFO L85 PathProgramCache]: Analyzing trace with hash 1188301001, now seen corresponding path program 1 times [2021-12-06 23:52:06,774 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:52:06,774 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1908223259] [2021-12-06 23:52:06,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:52:06,775 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:52:06,775 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:52:06,777 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:52:06,779 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (20)] Waiting until timeout for monitored process [2021-12-06 23:52:07,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:52:07,806 INFO L263 TraceCheckSpWp]: Trace formula consists of 1775 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:52:07,810 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:52:09,203 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-06 23:52:09,204 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:52:09,204 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:52:09,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1908223259] [2021-12-06 23:52:09,204 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1908223259] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:52:09,204 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:52:09,204 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:52:09,204 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1823065121] [2021-12-06 23:52:09,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:52:09,205 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:52:09,205 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:52:09,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:52:09,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:52:09,206 INFO L87 Difference]: Start difference. First operand 13231 states and 19304 transitions. Second operand has 3 states, 3 states have (on average 53.666666666666664) internal successors, (161), 3 states have internal predecessors, (161), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:52:09,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:52:09,714 INFO L93 Difference]: Finished difference Result 26409 states and 38534 transitions. [2021-12-06 23:52:09,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:52:09,715 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 53.666666666666664) internal successors, (161), 3 states have internal predecessors, (161), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 289 [2021-12-06 23:52:09,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:52:09,752 INFO L225 Difference]: With dead ends: 26409 [2021-12-06 23:52:09,753 INFO L226 Difference]: Without dead ends: 13211 [2021-12-06 23:52:09,778 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 287 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:52:09,778 INFO L933 BasicCegarLoop]: 2248 mSDtfsCounter, 2237 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2237 SdHoareTripleChecker+Valid, 2248 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:52:09,779 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2237 Valid, 2248 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:52:09,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13211 states. [2021-12-06 23:52:10,370 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13211 to 13211. [2021-12-06 23:52:10,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13211 states, 9318 states have (on average 1.3930027902983473) internal successors, (12980), 9821 states have internal predecessors, (12980), 3047 states have call successors, (3047), 834 states have call predecessors, (3047), 845 states have return successors, (3232), 2789 states have call predecessors, (3232), 3045 states have call successors, (3232) [2021-12-06 23:52:10,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13211 states to 13211 states and 19259 transitions. [2021-12-06 23:52:10,414 INFO L78 Accepts]: Start accepts. Automaton has 13211 states and 19259 transitions. Word has length 289 [2021-12-06 23:52:10,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:52:10,415 INFO L470 AbstractCegarLoop]: Abstraction has 13211 states and 19259 transitions. [2021-12-06 23:52:10,415 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 53.666666666666664) internal successors, (161), 3 states have internal predecessors, (161), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:52:10,415 INFO L276 IsEmpty]: Start isEmpty. Operand 13211 states and 19259 transitions. [2021-12-06 23:52:10,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2021-12-06 23:52:10,431 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:52:10,432 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:52:10,453 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (20)] Forceful destruction successful, exit code 0 [2021-12-06 23:52:10,632 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:52:10,633 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:52:10,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:52:10,635 INFO L85 PathProgramCache]: Analyzing trace with hash 37556904, now seen corresponding path program 1 times [2021-12-06 23:52:10,638 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:52:10,639 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1038816821] [2021-12-06 23:52:10,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:52:10,640 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:52:10,640 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:52:10,642 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:52:10,644 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (21)] Waiting until timeout for monitored process [2021-12-06 23:52:11,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:52:11,580 INFO L263 TraceCheckSpWp]: Trace formula consists of 1779 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 23:52:11,583 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:52:12,998 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-06 23:52:12,998 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 23:52:12,999 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 23:52:12,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1038816821] [2021-12-06 23:52:12,999 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1038816821] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:52:12,999 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:52:12,999 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:52:12,999 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1607551993] [2021-12-06 23:52:13,000 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:52:13,000 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:52:13,000 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 23:52:13,001 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:52:13,001 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:52:13,001 INFO L87 Difference]: Start difference. First operand 13211 states and 19259 transitions. Second operand has 3 states, 3 states have (on average 54.333333333333336) internal successors, (163), 3 states have internal predecessors, (163), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:52:13,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:52:13,531 INFO L93 Difference]: Finished difference Result 26369 states and 38444 transitions. [2021-12-06 23:52:13,532 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:52:13,532 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 54.333333333333336) internal successors, (163), 3 states have internal predecessors, (163), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 291 [2021-12-06 23:52:13,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:52:13,567 INFO L225 Difference]: With dead ends: 26369 [2021-12-06 23:52:13,567 INFO L226 Difference]: Without dead ends: 13191 [2021-12-06 23:52:13,594 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 290 GetRequests, 289 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:52:13,595 INFO L933 BasicCegarLoop]: 2244 mSDtfsCounter, 2231 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2231 SdHoareTripleChecker+Valid, 2244 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:52:13,595 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2231 Valid, 2244 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:52:13,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13191 states. [2021-12-06 23:52:14,086 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13191 to 13191. [2021-12-06 23:52:14,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13191 states, 9308 states have (on average 1.3923506660936829) internal successors, (12960), 9811 states have internal predecessors, (12960), 3037 states have call successors, (3037), 834 states have call predecessors, (3037), 845 states have return successors, (3217), 2779 states have call predecessors, (3217), 3035 states have call successors, (3217) [2021-12-06 23:52:14,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13191 states to 13191 states and 19214 transitions. [2021-12-06 23:52:14,130 INFO L78 Accepts]: Start accepts. Automaton has 13191 states and 19214 transitions. Word has length 291 [2021-12-06 23:52:14,130 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:52:14,130 INFO L470 AbstractCegarLoop]: Abstraction has 13191 states and 19214 transitions. [2021-12-06 23:52:14,130 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 54.333333333333336) internal successors, (163), 3 states have internal predecessors, (163), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 23:52:14,130 INFO L276 IsEmpty]: Start isEmpty. Operand 13191 states and 19214 transitions. [2021-12-06 23:52:14,142 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-12-06 23:52:14,142 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:52:14,143 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:52:14,164 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (21)] Ended with exit code 0 [2021-12-06 23:52:14,343 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:52:14,344 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:52:14,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:52:14,346 INFO L85 PathProgramCache]: Analyzing trace with hash -1842326138, now seen corresponding path program 1 times [2021-12-06 23:52:14,349 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 23:52:14,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [965814246] [2021-12-06 23:52:14,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:52:14,351 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 23:52:14,351 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 23:52:14,353 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 23:52:14,356 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (22)] Waiting until timeout for monitored process [2021-12-06 23:52:26,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:52:26,345 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 23:52:34,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 23:52:36,205 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-06 23:52:36,205 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 23:52:36,206 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 23:52:36,243 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (22)] Ended with exit code 0 [2021-12-06 23:52:36,407 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 23:52:36,417 INFO L732 BasicCegarLoop]: Path program histogram: [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:52:36,426 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 23:52:36,517 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 23:52:36,520 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 23:52:36,893 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 11:52:36 BoogieIcfgContainer [2021-12-06 23:52:36,894 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 23:52:36,894 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 23:52:36,894 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 23:52:36,894 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 23:52:36,894 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:51:02" (3/4) ... [2021-12-06 23:52:36,896 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 23:52:36,896 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 23:52:36,897 INFO L158 Benchmark]: Toolchain (without parser) took 142869.54ms. Allocated memory was 52.4MB in the beginning and 1.8GB in the end (delta: 1.8GB). Free memory was 28.3MB in the beginning and 857.4MB in the end (delta: -829.2MB). Peak memory consumption was 927.8MB. Max. memory is 16.1GB. [2021-12-06 23:52:36,897 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 52.4MB. Free memory was 33.4MB in the beginning and 33.3MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:52:36,897 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2131.80ms. Allocated memory was 52.4MB in the beginning and 125.8MB in the end (delta: 73.4MB). Free memory was 27.9MB in the beginning and 42.6MB in the end (delta: -14.7MB). Peak memory consumption was 63.7MB. Max. memory is 16.1GB. [2021-12-06 23:52:36,898 INFO L158 Benchmark]: Boogie Procedure Inliner took 147.86ms. Allocated memory is still 125.8MB. Free memory was 42.0MB in the beginning and 44.0MB in the end (delta: -2.0MB). Peak memory consumption was 7.0MB. Max. memory is 16.1GB. [2021-12-06 23:52:36,898 INFO L158 Benchmark]: Boogie Preprocessor took 205.85ms. Allocated memory was 125.8MB in the beginning and 241.2MB in the end (delta: 115.3MB). Free memory was 44.0MB in the beginning and 166.0MB in the end (delta: -121.9MB). Peak memory consumption was 22.6MB. Max. memory is 16.1GB. [2021-12-06 23:52:36,898 INFO L158 Benchmark]: RCFGBuilder took 45838.51ms. Allocated memory is still 241.2MB. Free memory was 166.0MB in the beginning and 128.6MB in the end (delta: 37.3MB). Peak memory consumption was 111.4MB. Max. memory is 16.1GB. [2021-12-06 23:52:36,898 INFO L158 Benchmark]: TraceAbstraction took 94538.44ms. Allocated memory was 241.2MB in the beginning and 1.8GB in the end (delta: 1.6GB). Free memory was 127.6MB in the beginning and 857.8MB in the end (delta: -730.2MB). Peak memory consumption was 1.4GB. Max. memory is 16.1GB. [2021-12-06 23:52:36,898 INFO L158 Benchmark]: Witness Printer took 2.57ms. Allocated memory is still 1.8GB. Free memory was 857.8MB in the beginning and 857.4MB in the end (delta: 328.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:52:36,900 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 52.4MB. Free memory was 33.4MB in the beginning and 33.3MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2131.80ms. Allocated memory was 52.4MB in the beginning and 125.8MB in the end (delta: 73.4MB). Free memory was 27.9MB in the beginning and 42.6MB in the end (delta: -14.7MB). Peak memory consumption was 63.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 147.86ms. Allocated memory is still 125.8MB. Free memory was 42.0MB in the beginning and 44.0MB in the end (delta: -2.0MB). Peak memory consumption was 7.0MB. Max. memory is 16.1GB. * Boogie Preprocessor took 205.85ms. Allocated memory was 125.8MB in the beginning and 241.2MB in the end (delta: 115.3MB). Free memory was 44.0MB in the beginning and 166.0MB in the end (delta: -121.9MB). Peak memory consumption was 22.6MB. Max. memory is 16.1GB. * RCFGBuilder took 45838.51ms. Allocated memory is still 241.2MB. Free memory was 166.0MB in the beginning and 128.6MB in the end (delta: 37.3MB). Peak memory consumption was 111.4MB. Max. memory is 16.1GB. * TraceAbstraction took 94538.44ms. Allocated memory was 241.2MB in the beginning and 1.8GB in the end (delta: 1.6GB). Free memory was 127.6MB in the beginning and 857.8MB in the end (delta: -730.2MB). Peak memory consumption was 1.4GB. Max. memory is 16.1GB. * Witness Printer took 2.57ms. Allocated memory is still 1.8GB. Free memory was 857.8MB in the beginning and 857.4MB in the end (delta: 328.8kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8151]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6893. Possible FailurePath: [L4340] int ldv_timer_state_5 = 0; [L4341] struct timer_list *ldv_timer_list_5 ; [L4342] struct timer_list *ldv_timer_list_4 ; [L4343] struct work_struct *ldv_work_struct_3_1 ; [L4344] struct mmc_host *vub300_mmc_ops_group0 ; [L4345] struct work_struct *ldv_work_struct_1_3 ; [L4346] int ldv_state_variable_0 ; [L4347] int ldv_state_variable_5 ; [L4348] int ldv_work_1_1 ; [L4349] int ldv_work_3_2 ; [L4350] int ldv_work_3_0 ; [L4351] struct work_struct *ldv_work_struct_2_3 ; [L4352] struct work_struct *ldv_work_struct_2_0 ; [L4353] struct work_struct *ldv_work_struct_2_2 ; [L4354] int ldv_timer_state_4 = 0; [L4355] int ref_cnt ; [L4356] int ldv_work_3_3 ; [L4357] int ldv_state_variable_1 ; [L4358] int ldv_state_variable_7 ; [L4359] struct work_struct *ldv_work_struct_3_3 ; [L4360] struct work_struct *ldv_work_struct_1_0 ; [L4361] struct work_struct *ldv_work_struct_1_1 ; [L4362] int ldv_work_1_3 ; [L4363] struct work_struct *ldv_work_struct_2_1 ; [L4364] struct work_struct *ldv_work_struct_3_2 ; [L4365] int ldv_state_variable_6 ; [L4366] int ldv_work_3_1 ; [L4367] int ldv_state_variable_2 ; [L4368] int ldv_work_2_0 ; [L4369] int usb_counter ; [L4370] struct work_struct *ldv_work_struct_3_0 ; [L4371] int ldv_work_1_2 ; [L4372] int LDV_IN_INTERRUPT = 1; [L4373] struct work_struct *ldv_work_struct_1_2 ; [L4374] int ldv_work_2_2 ; [L4375] int ldv_state_variable_3 ; [L4376] struct usb_interface *vub300_driver_group1 ; [L4377] int ldv_work_1_0 ; [L4378] int ldv_work_2_3 ; [L4379] int ldv_state_variable_4 ; [L4380] int ldv_work_2_1 ; [L4437] static bool limit_speed_to_24_MHz ; [L4438] static bool pad_input_to_usb_pkt ; [L4439] static bool disable_offload_processing ; [L4440] static bool force_1_bit_data_xfers ; [L4441] static bool force_polling_for_irqs ; [L4442] static int firmware_irqpoll_timeout = 1024; [L4443] static int force_max_req_size = 128; [L4444] static int firmware_rom_wait_states = 28; [L4445-L4450] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4451] struct usb_device_id const __mod_usb_device_table ; [L4452] static struct workqueue_struct *cmndworkqueue ; [L4453] static struct workqueue_struct *pollworkqueue ; [L4454] static struct workqueue_struct *deadworkqueue ; [L6440-L6442] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6853-L6859] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6932] int ldv_retval_0 ; [L6933] int ldv_retval_1 ; [L6937] int ldv_retval_3 ; [L6938] int ldv_retval_2 ; [L8154] int URB_STATE = 0; [L8155] int DEV_STATE = 0; [L8156] int INTERF_STATE = 0; [L8157] int SERIAL_STATE = 0; [L8158] void *usb_intfdata = (void *)0; [L8159] struct urb *int_urb = (struct urb *)0; [L8160] struct urb *bulk_urb = (struct urb *)0; [L8161] void (*completeFnInt)(struct urb * ) ; [L8162] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7530] struct usb_device_id *ldvarg1 ; [L7531] void *tmp ; [L7532] pm_message_t ldvarg0 ; [L7533] struct mmc_card *ldvarg4 ; [L7534] void *tmp___0 ; [L7535] struct mmc_ios *ldvarg3 ; [L7536] void *tmp___1 ; [L7537] int ldvarg5 ; [L7538] struct mmc_request *ldvarg2 ; [L7539] void *tmp___2 ; [L7540] int tmp___3 ; [L7541] int tmp___4 ; [L7542] int tmp___5 ; [L7543] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1047:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1047:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1047:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={1047:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1047:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1047:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={1047:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={1047:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1047:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1047:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={1047:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={1047:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] tmp = ldv_init_zalloc(32UL) [L7546] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] CALL, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1111:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1111:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1111:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={1111:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1111:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1111:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={1111:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1824, \result={1111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1111:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1111:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={1111:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] RET, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1824UL)={1111:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] tmp___0 = ldv_init_zalloc(1824UL) [L7548] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1812:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1812:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1812:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={1812:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1812:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1812:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={1812:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={1812:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1812:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1812:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={1812:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={1812:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] tmp___1 = ldv_init_zalloc(16UL) [L7550] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1152921504606848023:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1152921504606848023:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1152921504606848023:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={1152921504606848023:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1152921504606848023:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1152921504606848023:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={1152921504606848023:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={1152921504606848023:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={1152921504606848023:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1152921504606848023:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={1152921504606848023:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={1152921504606848023:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] tmp___2 = ldv_init_zalloc(136UL) [L7552] ldvarg2 = (struct mmc_request *)tmp___2 [L7553] FCALL ldv_initialize() [L7554] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={1152921504606848902:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={1152921504606848902:0}, s={1152921504606848902:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={1152921504606848902:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={1152921504606848902:0}, s={1152921504606848902:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={1152921504606848902:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={1152921504606848902:0}, s={1152921504606848902:0}, SERIAL_STATE=0, tmp={1152921504606848902:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7554] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={1152921504606848902:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7555] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={1152921504606848055:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={1152921504606848055:0}, s={1152921504606848055:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={1152921504606848055:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={1152921504606848055:0}, s={1152921504606848055:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={1152921504606848055:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={1152921504606848055:0}, s={1152921504606848055:0}, SERIAL_STATE=0, tmp={1152921504606848055:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7555] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={1152921504606848055:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7556] ldv_state_variable_6 = 0 [L7557] CALL work_init_3() [L6942] ldv_work_3_0 = 0 [L6943] ldv_work_3_1 = 0 [L6944] ldv_work_3_2 = 0 [L6945] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7557] RET work_init_3() [L7558] ldv_state_variable_3 = 1 [L7559] ldv_state_variable_7 = 0 [L7560] CALL work_init_2() [L6992] ldv_work_2_0 = 0 [L6993] ldv_work_2_1 = 0 [L6994] ldv_work_2_2 = 0 [L6995] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7560] RET work_init_2() [L7561] ldv_state_variable_2 = 1 [L7562] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7562] RET work_init_1() [L7563] ldv_state_variable_1 = 1 [L7564] ldv_state_variable_4 = 1 [L7565] ref_cnt = 0 [L7566] ldv_state_variable_0 = 1 [L7567] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, tmp___3=6, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: [L7716] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7717] COND TRUE ldv_state_variable_0 == 1 [L7718] CALL, EXPR vub300_init() [L6862] int result ; [L6863] struct lock_class_key __key ; [L6864] char const *__lock_name ; [L6865] struct workqueue_struct *tmp ; [L6866] struct lock_class_key __key___0 ; [L6867] char const *__lock_name___0 ; [L6868] struct workqueue_struct *tmp___0 ; [L6869] struct lock_class_key __key___1 ; [L6870] char const *__lock_name___1 ; [L6871] struct workqueue_struct *tmp___1 ; [L6875] __lock_name = "kvub300c" [L6876] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6877] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:-9151279258444759040}, __key={3458764513820538908:0}, __key___0={-8070450532247927753:0}, __key___1={1152921504606848884:0}, __lock_name={74:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:-9151279258444759040}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6878] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] __lock_name___0 = "kvub300p" [L6885] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6886] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:-9151279258444759040}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={0:-9223372036854775808}, __key={3458764513820538908:0}, __key___0={-8070450532247927753:0}, __key___1={1152921504606848884:0}, __lock_name={74:0}, __lock_name___0={77:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:-9151279258444759040}, tmp___0={0:-9223372036854775808}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6887] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6893] __lock_name___1 = "kvub300d" [L6894] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6895] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:-9151279258444759040}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={-9223372036854775808:0}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={0:-9223372036854775808}, __key={3458764513820538908:0}, __key___0={-8070450532247927753:0}, __key___1={1152921504606848884:0}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:-9151279258444759040}, tmp___0={0:-9223372036854775808}, tmp___1={-9223372036854775808:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6896] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6902] CALL, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L8056] ldv_func_ret_type___13 ldv_func_res ; [L8057] int tmp ; [L8059] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8538] return __VERIFIER_nondet_int(); [L8059] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8059] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8060] ldv_func_res = tmp [L8061] ldv_state_variable_6 = 1 [L8062] usb_counter = 0 [L8063] CALL ldv_usb_driver_6() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={576460752303424319:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={576460752303424319:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={576460752303424319:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={576460752303424319:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, cond=1, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={576460752303424319:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={576460752303424319:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={576460752303424319:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={576460752303424319:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={576460752303424319:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={576460752303424319:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={576460752303424319:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={576460752303424319:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={576460752303424319:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L8063] RET ldv_usb_driver_6() [L8064] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={87:0}, ldv_func_arg1={87:0}, ldv_func_arg2={94:93}, ldv_func_arg2={94:93}, ldv_func_arg3={83:0}, ldv_func_arg3={83:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6902] RET, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6902] result = ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6903] COND FALSE !(result != 0) [L6908] return (0); [L6908] return (0); [L6908] return (0); [L6908] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:-9151279258444759040}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={-9223372036854775808:0}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={0:-9223372036854775808}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={0:-9151279258444759040}, tmp___0={0:-9223372036854775808}, tmp___1={-9223372036854775808:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7718] RET, EXPR vub300_init() [L7718] ldv_retval_3 = vub300_init() [L7719] COND TRUE ldv_retval_3 == 0 [L7720] ldv_state_variable_0 = 3 [L7721] ldv_state_variable_7 = 1 [L7722] CALL ldv_initialize_mmc_host_ops_7() [L7001] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={1815:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={1815:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1815:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={1815:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, cond=1, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={1815:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1815:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={1815:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={1815:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={1815:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1815:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={1815:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={1815:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] tmp = ldv_init_zalloc(2624UL) [L7004] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={1815:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7722] RET ldv_initialize_mmc_host_ops_7() [L7725] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, tmp___3=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7572] COND TRUE ldv_state_variable_6 != 0 [L7573] tmp___4 = __VERIFIER_nondet_int() [L7575] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7576] COND TRUE ldv_state_variable_6 == 1 [L7577] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6445] struct vub300_mmc_host *vub300 ; [L6446] struct usb_host_interface *iface_desc ; [L6447] struct usb_device *udev ; [L6448] struct usb_device *tmp ; [L6449] struct usb_device *tmp___0 ; [L6450] int i ; [L6451] int retval ; [L6452] struct urb *command_out_urb ; [L6453] struct urb *command_res_urb ; [L6454] struct mmc_host *mmc ; [L6455] char manufacturer[48U] ; [L6456] char product[32U] ; [L6457] char serial_number[32U] ; [L6458] void *tmp___1 ; [L6459] struct lock_class_key __key ; [L6460] struct lock_class_key __key___0 ; [L6461] int tmp___2 ; [L6462] struct usb_endpoint_descriptor *endpoint ; [L6463] int tmp___4 ; [L6464] char *tmp___5 ; [L6465] int tmp___6 ; [L6466] int tmp___7 ; [L6467] int tmp___8 ; [L6468] unsigned int tmp___9 ; [L6469] unsigned int tmp___10 ; [L6470] unsigned int tmp___11 ; [L6471] struct lock_class_key __key___1 ; [L6472] atomic_long_t __constr_expr_0 ; [L6473] struct lock_class_key __key___2 ; [L6474] struct lock_class_key __key___3 ; [L6475] atomic_long_t __constr_expr_1 ; [L6476] struct lock_class_key __key___4 ; [L6477] atomic_long_t __constr_expr_2 ; [L6478] int tmp___12 ; [L6479] int tmp___13 ; [L6481] CALL, EXPR interface_to_usbdev(interface) [L7799] struct usb_device *tmp ; [L7801] CALL, EXPR ldv_interface_to_usbdev() [L8277] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8282] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND FALSE !(tmp___0 != 0) [L4268] tmp = malloc(size) [L4269] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={546:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={546:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L4270] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, cond=1, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L4270] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={546:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={546:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L4271] return (p); VAL [={0:0}, ={0:0}, \old(size)=1672, \result={546:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={546:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={546:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8282] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={546:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8282] result = ldv_malloc(sizeof(struct usb_device)) [L8283] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8287] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={546:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, result={546:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7801] RET, EXPR ldv_interface_to_usbdev() [L7801] tmp = ldv_interface_to_usbdev() [L7802] return (tmp); VAL [={0:0}, ={0:0}, \result={546:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={576460752303424319:0}, intf={576460752303424319:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={546:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6481] RET, EXPR interface_to_usbdev(interface) [L6481] tmp = interface_to_usbdev(interface) [L6482] CALL, EXPR ldv_usb_get_dev_44(tmp) [L7996] CALL ldv_get_dev(ldv_func_arg1) [L8293] DEV_STATE = DEV_STATE + 1 [L8294] return (data); VAL [={0:0}, ={0:0}, \result={546:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, data={546:0}, data={546:0}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7996] RET ldv_get_dev(ldv_func_arg1) [L7997] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={546:0}, ldv_func_arg1={546:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6482] RET, EXPR ldv_usb_get_dev_44(tmp) [L6482] tmp___0 = ldv_usb_get_dev_44(tmp) [L6483] udev = tmp___0 [L6484] retval = -12 [L6485] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={1152921504741066528:0}, __constr_expr_1={1152921504606848829:0}, __constr_expr_2={1152921504606848831:0}, __key={1152921504606848991:0}, __key___0={1152921504606848851:0}, __key___1={1152921504606848855:0}, __key___2={1152921504606848822:0}, __key___3={1152921504741064756:0}, __key___4={-8070450532113709280:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={1047:0}, id={1047:0}, int_urb={0:0}, INTERF_STATE=0, interface={576460752303424319:0}, interface={576460752303424319:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={1152921504606848871:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={1152921504606848826:0}, ref_cnt=0, retval=4294967284, serial_number={1152921504606848863:0}, SERIAL_STATE=0, tmp={546:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6485-L6486] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={1152921504606848871:0}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6485-L6486] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={1152921504741066528:0}, __constr_expr_1={1152921504606848829:0}, __constr_expr_2={1152921504606848831:0}, __key={1152921504606848991:0}, __key___0={1152921504606848851:0}, __key___1={1152921504606848855:0}, __key___2={1152921504606848822:0}, __key___3={1152921504741064756:0}, __key___4={-8070450532113709280:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={1047:0}, id={1047:0}, int_urb={0:0}, INTERF_STATE=0, interface={576460752303424319:0}, interface={576460752303424319:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={1152921504606848871:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={1152921504606848826:0}, ref_cnt=0, retval=4294967284, serial_number={1152921504606848863:0}, SERIAL_STATE=0, tmp={546:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=94, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6487] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={1152921504741066528:0}, __constr_expr_1={1152921504606848829:0}, __constr_expr_2={1152921504606848831:0}, __key={1152921504606848991:0}, __key___0={1152921504606848851:0}, __key___1={1152921504606848855:0}, __key___2={1152921504606848822:0}, __key___3={1152921504741064756:0}, __key___4={-8070450532113709280:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={1047:0}, id={1047:0}, int_urb={0:0}, INTERF_STATE=0, interface={576460752303424319:0}, interface={576460752303424319:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={1152921504606848871:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={1152921504606848826:0}, ref_cnt=0, retval=4294967284, serial_number={1152921504606848863:0}, SERIAL_STATE=0, tmp={546:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6487] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={1152921504606848826:0}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6487] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={1152921504741066528:0}, __constr_expr_1={1152921504606848829:0}, __constr_expr_2={1152921504606848831:0}, __key={1152921504606848991:0}, __key___0={1152921504606848851:0}, __key___1={1152921504606848855:0}, __key___2={1152921504606848822:0}, __key___3={1152921504741064756:0}, __key___4={-8070450532113709280:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={1047:0}, id={1047:0}, int_urb={0:0}, INTERF_STATE=0, interface={576460752303424319:0}, interface={576460752303424319:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={1152921504606848871:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={1152921504606848826:0}, ref_cnt=0, retval=4294967284, serial_number={1152921504606848863:0}, SERIAL_STATE=0, tmp={546:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=95, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6488] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={1152921504741066528:0}, __constr_expr_1={1152921504606848829:0}, __constr_expr_2={1152921504606848831:0}, __key={1152921504606848991:0}, __key___0={1152921504606848851:0}, __key___1={1152921504606848855:0}, __key___2={1152921504606848822:0}, __key___3={1152921504741064756:0}, __key___4={-8070450532113709280:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={1047:0}, id={1047:0}, int_urb={0:0}, INTERF_STATE=0, interface={576460752303424319:0}, interface={576460752303424319:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={1152921504606848871:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={1152921504606848826:0}, ref_cnt=0, retval=4294967284, serial_number={1152921504606848863:0}, SERIAL_STATE=0, tmp={546:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6488-L6489] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={1152921504606848863:0}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6488-L6489] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={1152921504741066528:0}, __constr_expr_1={1152921504606848829:0}, __constr_expr_2={1152921504606848831:0}, __key={1152921504606848991:0}, __key___0={1152921504606848851:0}, __key___1={1152921504606848855:0}, __key___2={1152921504606848822:0}, __key___3={1152921504741064756:0}, __key___4={-8070450532113709280:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={1047:0}, id={1047:0}, int_urb={0:0}, INTERF_STATE=0, interface={576460752303424319:0}, interface={576460752303424319:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={1152921504606848871:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={1152921504606848826:0}, ref_cnt=0, retval=4294967284, serial_number={1152921504606848863:0}, SERIAL_STATE=0, tmp={546:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=96, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6491] udev->descriptor.idVendor [L6491] udev->descriptor.idProduct [L6493] CALL, EXPR ldv_usb_alloc_urb_45(0, 208U) [L8002] ldv_func_ret_type___11 ldv_func_res ; [L8003] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8005] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8514] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND TRUE tmp___0 != 0 [L4266] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=2147483648, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8514] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0=null, arg1=208, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8514] return ldv_malloc(sizeof(struct urb)); [L8005] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8005] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8006] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8007] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8186] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8007] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8008] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6493] RET, EXPR ldv_usb_alloc_urb_45(0, 208U) [L6493] command_out_urb = ldv_usb_alloc_urb_45(0, 208U) [L6494] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6495] retval = -12 [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, command_out_urb={0:0}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={1047:0}, id={1047:0}, int_urb={0:0}, INTERF_STATE=0, interface={576460752303424319:0}, interface={576460752303424319:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, retval=4294967284, SERIAL_STATE=0, tmp={546:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7577] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7577] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7578] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, tmp___3=6, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7709] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7710] CALL vub300_exit() [L6922] CALL ldv_usb_deregister_61(& vub300_driver) [L8094] FCALL usb_deregister(arg) [L8095] ldv_state_variable_6 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg={87:0}, arg={87:0}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6922] RET ldv_usb_deregister_61(& vub300_driver) [L6923] CALL ldv_flush_workqueue_62(cmndworkqueue) [L8102] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9151279258444759040}, ldv_func_arg1={0:-9151279258444759040}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8103] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8103] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9151279258444759040}, ldv_func_arg1={0:-9151279258444759040}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6923] RET ldv_flush_workqueue_62(cmndworkqueue) [L6924] CALL ldv_flush_workqueue_63(pollworkqueue) [L8110] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8111] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8111] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6924] RET ldv_flush_workqueue_63(pollworkqueue) [L6925] CALL ldv_flush_workqueue_64(deadworkqueue) [L8118] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036854775808:0}, ldv_func_arg1={-9223372036854775808:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8119] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8119] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036854775808:0}, ldv_func_arg1={-9223372036854775808:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6925] RET ldv_flush_workqueue_64(deadworkqueue) [L6926] CALL ldv_destroy_workqueue_65(cmndworkqueue) [L8126] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9151279258444759040}, ldv_func_arg1={0:-9151279258444759040}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8127] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8127] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9151279258444759040}, ldv_func_arg1={0:-9151279258444759040}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6926] RET ldv_destroy_workqueue_65(cmndworkqueue) [L6927] CALL ldv_destroy_workqueue_66(pollworkqueue) [L8134] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8135] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8135] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6927] RET ldv_destroy_workqueue_66(pollworkqueue) [L6928] CALL ldv_destroy_workqueue_67(deadworkqueue) [L8142] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036854775808:0}, ldv_func_arg1={-9223372036854775808:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8143] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8143] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036854775808:0}, ldv_func_arg1={-9223372036854775808:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L6928] RET ldv_destroy_workqueue_67(deadworkqueue) [L7710] RET vub300_exit() [L7711] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={1152921504606848902:0}, ldvarg1={1047:0}, ldvarg2={1152921504606848023:0}, ldvarg3={1812:0}, ldvarg4={1111:0}, ldvarg5={1152921504606848055:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={1047:0}, tmp___0={1111:0}, tmp___1={1812:0}, tmp___2={1152921504606848023:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L7752] CALL ldv_check_final_state() [L8355] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8359] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8360] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] [L8151] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9151279258444759040}, deadworkqueue={-9223372036854775808:0}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={576460752303424319:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={1815:0}, vub300_table={85:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1582 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 94.0s, OverallIterations: 21, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.2s, AutomataDifference: 19.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 28222 SdHoareTripleChecker+Valid, 10.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 28072 mSDsluCounter, 158066 SdHoareTripleChecker+Invalid, 9.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 106678 mSDsCounter, 490 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1083 IncrementalHoareTripleChecker+Invalid, 1573 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 490 mSolverCounterUnsat, 51388 mSDtfsCounter, 1083 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 4162 GetRequests, 4075 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 7.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=21461occurred in iteration=15, InterpolantAutomatonStates: 100, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.6s AutomataMinimizationTime, 20 MinimizatonAttempts, 9532 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.8s SsaConstructionTime, 19.9s SatisfiabilityAnalysisTime, 28.0s InterpolantComputationTime, 4117 NumberOfCodeBlocks, 3922 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 4137 ConstructedInterpolants, 0 QuantifiedInterpolants, 5738 SizeOfPredicates, 21 NumberOfNonLiveVariables, 25727 ConjunctsInSsa, 82 ConjunctsInUnsatCore, 23 InterpolantComputations, 17 PerfectInterpolantSequences, 3841/3908 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 23:52:36,998 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9bd50737-d635-4af2-bb38-b3cbb7d65f95/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample