./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 22:48:16,502 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 22:48:16,503 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 22:48:16,526 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 22:48:16,526 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 22:48:16,527 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 22:48:16,529 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 22:48:16,530 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 22:48:16,532 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 22:48:16,533 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 22:48:16,533 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 22:48:16,534 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 22:48:16,535 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 22:48:16,535 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 22:48:16,537 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 22:48:16,538 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 22:48:16,539 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 22:48:16,539 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 22:48:16,541 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 22:48:16,543 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 22:48:16,544 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 22:48:16,546 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 22:48:16,547 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 22:48:16,548 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 22:48:16,551 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 22:48:16,552 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 22:48:16,552 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 22:48:16,553 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 22:48:16,554 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 22:48:16,555 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 22:48:16,555 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 22:48:16,556 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 22:48:16,557 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 22:48:16,558 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 22:48:16,559 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 22:48:16,559 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 22:48:16,560 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 22:48:16,560 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 22:48:16,560 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 22:48:16,561 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 22:48:16,562 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 22:48:16,563 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-06 22:48:16,587 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 22:48:16,587 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 22:48:16,593 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 22:48:16,593 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 22:48:16,594 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 22:48:16,594 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 22:48:16,594 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 22:48:16,594 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 22:48:16,595 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 22:48:16,595 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 22:48:16,595 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 22:48:16,595 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 22:48:16,595 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 22:48:16,596 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 22:48:16,596 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 22:48:16,596 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 22:48:16,596 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 22:48:16,596 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 22:48:16,597 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 22:48:16,597 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 22:48:16,597 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 22:48:16,597 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:48:16,597 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 22:48:16,597 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 22:48:16,598 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 22:48:16,598 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 22:48:16,598 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 22:48:16,598 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 22:48:16,598 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 22:48:16,598 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 22:48:16,599 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 22:48:16,599 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 [2021-12-06 22:48:16,786 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 22:48:16,805 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 22:48:16,808 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 22:48:16,809 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 22:48:16,810 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 22:48:16,811 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:48:16,855 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data/2d84f9bd4/9f337547edc242d6bce2349029164d48/FLAG33951677b [2021-12-06 22:48:17,363 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 22:48:17,363 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:48:17,397 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data/2d84f9bd4/9f337547edc242d6bce2349029164d48/FLAG33951677b [2021-12-06 22:48:17,570 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data/2d84f9bd4/9f337547edc242d6bce2349029164d48 [2021-12-06 22:48:17,571 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 22:48:17,572 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 22:48:17,573 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 22:48:17,573 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 22:48:17,576 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 22:48:17,576 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:48:17" (1/1) ... [2021-12-06 22:48:17,577 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2a8bfa00 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:17, skipping insertion in model container [2021-12-06 22:48:17,577 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:48:17" (1/1) ... [2021-12-06 22:48:17,582 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 22:48:17,646 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:48:18,845 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-12-06 22:48:18,877 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:48:18,893 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 22:48:19,102 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-12-06 22:48:19,111 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:48:19,182 INFO L208 MainTranslator]: Completed translation [2021-12-06 22:48:19,182 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19 WrapperNode [2021-12-06 22:48:19,182 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 22:48:19,183 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 22:48:19,184 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 22:48:19,184 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 22:48:19,190 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,244 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,356 INFO L137 Inliner]: procedures = 260, calls = 1808, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4518 [2021-12-06 22:48:19,356 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 22:48:19,357 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 22:48:19,357 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 22:48:19,357 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 22:48:19,364 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,364 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,376 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,377 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,462 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,478 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,495 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,515 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 22:48:19,516 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 22:48:19,516 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 22:48:19,516 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 22:48:19,517 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (1/1) ... [2021-12-06 22:48:19,524 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:48:19,534 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:48:19,547 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 22:48:19,549 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 22:48:19,584 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-12-06 22:48:19,584 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-12-06 22:48:19,584 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 22:48:19,584 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 22:48:19,584 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 22:48:19,584 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 22:48:19,584 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-06 22:48:19,584 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-06 22:48:19,584 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-12-06 22:48:19,585 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-12-06 22:48:19,585 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_11 [2021-12-06 22:48:19,585 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_11 [2021-12-06 22:48:19,585 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-12-06 22:48:19,585 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-12-06 22:48:19,585 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-12-06 22:48:19,585 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-12-06 22:48:19,585 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-06 22:48:19,585 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-06 22:48:19,585 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-12-06 22:48:19,585 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-12-06 22:48:19,585 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 22:48:19,586 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 22:48:19,586 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-06 22:48:19,586 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-06 22:48:19,586 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-12-06 22:48:19,586 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-12-06 22:48:19,586 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-12-06 22:48:19,586 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-12-06 22:48:19,586 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-12-06 22:48:19,586 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-12-06 22:48:19,586 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 22:48:19,586 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 22:48:19,586 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 22:48:19,586 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 22:48:19,587 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_49 [2021-12-06 22:48:19,587 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_49 [2021-12-06 22:48:19,587 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 22:48:19,587 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 22:48:19,587 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-12-06 22:48:19,587 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-12-06 22:48:19,587 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-12-06 22:48:19,587 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-12-06 22:48:19,587 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-12-06 22:48:19,587 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-12-06 22:48:19,587 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-12-06 22:48:19,587 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-12-06 22:48:19,588 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-12-06 22:48:19,588 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-12-06 22:48:19,588 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-12-06 22:48:19,588 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-12-06 22:48:19,588 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_26 [2021-12-06 22:48:19,588 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_26 [2021-12-06 22:48:19,588 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 22:48:19,588 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_28 [2021-12-06 22:48:19,588 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_28 [2021-12-06 22:48:19,588 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-06 22:48:19,588 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-06 22:48:19,588 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-12-06 22:48:19,589 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-12-06 22:48:19,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 22:48:19,589 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2021-12-06 22:48:19,589 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2021-12-06 22:48:19,589 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-12-06 22:48:19,589 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-12-06 22:48:19,589 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-12-06 22:48:19,589 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-12-06 22:48:19,589 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-12-06 22:48:19,589 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-12-06 22:48:19,589 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_14 [2021-12-06 22:48:19,589 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_14 [2021-12-06 22:48:19,590 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-12-06 22:48:19,590 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-12-06 22:48:19,590 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 22:48:19,590 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 22:48:19,590 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-12-06 22:48:19,590 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-12-06 22:48:19,590 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-06 22:48:19,590 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-06 22:48:19,590 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-12-06 22:48:19,590 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-12-06 22:48:19,590 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-12-06 22:48:19,590 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-12-06 22:48:19,590 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-12-06 22:48:19,591 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-12-06 22:48:19,591 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-12-06 22:48:19,591 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-12-06 22:48:19,591 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-12-06 22:48:19,591 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-12-06 22:48:19,591 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-12-06 22:48:19,591 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-12-06 22:48:19,591 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-12-06 22:48:19,591 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-12-06 22:48:19,591 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-12-06 22:48:19,591 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-12-06 22:48:19,591 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-12-06 22:48:19,592 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-12-06 22:48:19,592 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-06 22:48:19,592 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-12-06 22:48:19,592 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-12-06 22:48:19,592 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-06 22:48:19,592 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-12-06 22:48:19,592 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-12-06 22:48:19,592 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-12-06 22:48:19,592 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-12-06 22:48:19,592 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-06 22:48:19,592 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_6 [2021-12-06 22:48:19,592 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_6 [2021-12-06 22:48:19,592 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-06 22:48:19,593 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-06 22:48:19,593 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 22:48:19,593 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 22:48:19,593 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-06 22:48:19,593 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-06 22:48:19,593 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-12-06 22:48:19,593 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-12-06 22:48:19,593 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-06 22:48:19,593 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-06 22:48:19,593 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 22:48:19,593 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 22:48:19,593 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-12-06 22:48:19,594 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-12-06 22:48:19,594 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-06 22:48:19,594 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-12-06 22:48:19,594 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-12-06 22:48:19,594 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-12-06 22:48:19,594 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-12-06 22:48:19,594 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-12-06 22:48:19,594 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-12-06 22:48:19,594 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 22:48:19,594 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 22:48:19,594 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_31 [2021-12-06 22:48:19,594 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_31 [2021-12-06 22:48:19,594 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-12-06 22:48:19,595 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-12-06 22:48:19,595 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 22:48:19,595 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_6 [2021-12-06 22:48:19,595 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_6 [2021-12-06 22:48:19,595 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-12-06 22:48:19,595 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-12-06 22:48:19,595 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-12-06 22:48:19,595 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-12-06 22:48:19,595 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-12-06 22:48:19,595 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-12-06 22:48:19,595 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-12-06 22:48:19,595 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-12-06 22:48:19,595 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 22:48:19,596 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-12-06 22:48:19,596 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-12-06 22:48:19,596 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_6 [2021-12-06 22:48:19,596 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_6 [2021-12-06 22:48:19,596 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_8 [2021-12-06 22:48:19,596 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_8 [2021-12-06 22:48:19,596 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-06 22:48:19,596 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-06 22:48:19,596 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 22:48:19,596 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-12-06 22:48:19,596 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-12-06 22:48:19,596 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 22:48:19,596 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 22:48:19,596 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-12-06 22:48:19,597 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-12-06 22:48:19,597 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-12-06 22:48:19,597 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-12-06 22:48:19,597 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-12-06 22:48:19,597 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-12-06 22:48:19,597 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-12-06 22:48:19,597 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-12-06 22:48:19,597 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-12-06 22:48:19,597 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-12-06 22:48:19,597 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-12-06 22:48:19,597 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-12-06 22:48:19,597 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-12-06 22:48:19,597 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-12-06 22:48:19,597 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-12-06 22:48:19,598 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-12-06 22:48:19,598 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-12-06 22:48:19,598 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-12-06 22:48:19,598 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-12-06 22:48:19,598 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-12-06 22:48:19,598 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-12-06 22:48:19,598 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-12-06 22:48:19,598 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-12-06 22:48:19,598 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-12-06 22:48:19,598 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-12-06 22:48:19,598 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-12-06 22:48:19,598 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2021-12-06 22:48:19,598 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2021-12-06 22:48:19,599 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_46 [2021-12-06 22:48:19,599 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_46 [2021-12-06 22:48:19,599 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-06 22:48:19,599 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-06 22:48:19,599 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 22:48:19,599 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-12-06 22:48:19,599 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-12-06 22:48:19,599 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-12-06 22:48:19,599 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-12-06 22:48:19,599 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-06 22:48:19,599 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-06 22:48:19,599 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-12-06 22:48:19,599 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-12-06 22:48:19,599 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-12-06 22:48:19,600 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-12-06 22:48:19,600 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-12-06 22:48:19,600 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 22:48:19,600 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 22:48:19,994 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 22:48:19,996 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 22:48:20,934 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 22:48:23,409 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 22:48:23,425 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 22:48:23,426 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-06 22:48:23,429 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:48:23 BoogieIcfgContainer [2021-12-06 22:48:23,429 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 22:48:23,430 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 22:48:23,430 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 22:48:23,432 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 22:48:23,433 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 10:48:17" (1/3) ... [2021-12-06 22:48:23,433 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9fe969e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:48:23, skipping insertion in model container [2021-12-06 22:48:23,433 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:48:19" (2/3) ... [2021-12-06 22:48:23,434 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9fe969e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:48:23, skipping insertion in model container [2021-12-06 22:48:23,434 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:48:23" (3/3) ... [2021-12-06 22:48:23,435 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:48:23,438 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 22:48:23,438 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 22:48:23,487 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 22:48:23,491 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 22:48:23,492 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 22:48:23,534 INFO L276 IsEmpty]: Start isEmpty. Operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) [2021-12-06 22:48:23,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:48:23,550 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:23,551 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:23,551 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:23,555 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:23,556 INFO L85 PathProgramCache]: Analyzing trace with hash -1754157023, now seen corresponding path program 1 times [2021-12-06 22:48:23,562 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:23,563 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1666891006] [2021-12-06 22:48:23,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:23,564 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:23,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:23,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:23,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:23,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:23,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:23,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:23,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:23,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:23,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:23,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:24,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:24,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:24,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:24,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:24,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:24,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:24,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:24,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:24,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:24,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:24,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:48:24,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:24,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:24,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:24,111 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:48:24,112 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:24,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1666891006] [2021-12-06 22:48:24,113 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1666891006] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:48:24,113 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:48:24,113 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:48:24,115 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [248802788] [2021-12-06 22:48:24,115 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:48:24,120 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:48:24,120 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:24,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:48:24,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:48:24,153 INFO L87 Difference]: Start difference. First operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:28,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:28,529 INFO L93 Difference]: Finished difference Result 3330 states and 4958 transitions. [2021-12-06 22:48:28,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 22:48:28,531 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-12-06 22:48:28,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:28,553 INFO L225 Difference]: With dead ends: 3330 [2021-12-06 22:48:28,553 INFO L226 Difference]: Without dead ends: 1732 [2021-12-06 22:48:28,564 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:48:28,566 INFO L933 BasicCegarLoop]: 2108 mSDtfsCounter, 1689 mSDsluCounter, 829 mSDsCounter, 0 mSdLazyCounter, 963 mSolverCounterSat, 1524 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1721 SdHoareTripleChecker+Valid, 2937 SdHoareTripleChecker+Invalid, 2487 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1524 IncrementalHoareTripleChecker+Valid, 963 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:28,567 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1721 Valid, 2937 Invalid, 2487 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1524 Valid, 963 Invalid, 0 Unknown, 0 Unchecked, 4.2s Time] [2021-12-06 22:48:28,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1732 states. [2021-12-06 22:48:28,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1732 to 1570. [2021-12-06 22:48:28,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1570 states, 1102 states have (on average 1.3874773139745917) internal successors, (1529), 1157 states have internal predecessors, (1529), 375 states have call successors, (375), 93 states have call predecessors, (375), 92 states have return successors, (371), 345 states have call predecessors, (371), 371 states have call successors, (371) [2021-12-06 22:48:28,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1570 states to 1570 states and 2275 transitions. [2021-12-06 22:48:28,693 INFO L78 Accepts]: Start accepts. Automaton has 1570 states and 2275 transitions. Word has length 114 [2021-12-06 22:48:28,693 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:28,694 INFO L470 AbstractCegarLoop]: Abstraction has 1570 states and 2275 transitions. [2021-12-06 22:48:28,694 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:28,694 INFO L276 IsEmpty]: Start isEmpty. Operand 1570 states and 2275 transitions. [2021-12-06 22:48:28,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:48:28,701 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:28,701 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:28,701 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 22:48:28,701 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:28,702 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:28,702 INFO L85 PathProgramCache]: Analyzing trace with hash 340574761, now seen corresponding path program 1 times [2021-12-06 22:48:28,702 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:28,702 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [108515387] [2021-12-06 22:48:28,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:28,702 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:28,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:28,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:28,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:28,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:28,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:28,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:28,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:28,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:28,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:28,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:28,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:28,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:28,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:28,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:28,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:48:28,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:28,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,006 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:48:29,007 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:29,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [108515387] [2021-12-06 22:48:29,007 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [108515387] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:48:29,007 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:48:29,007 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:48:29,008 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1418296971] [2021-12-06 22:48:29,008 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:48:29,009 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:48:29,009 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:29,010 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:48:29,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:48:29,010 INFO L87 Difference]: Start difference. First operand 1570 states and 2275 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:38,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:38,786 INFO L93 Difference]: Finished difference Result 4978 states and 7479 transitions. [2021-12-06 22:48:38,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:48:38,786 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-12-06 22:48:38,786 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:38,805 INFO L225 Difference]: With dead ends: 4978 [2021-12-06 22:48:38,805 INFO L226 Difference]: Without dead ends: 3431 [2021-12-06 22:48:38,812 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:48:38,813 INFO L933 BasicCegarLoop]: 2630 mSDtfsCounter, 4041 mSDsluCounter, 3612 mSDsCounter, 0 mSdLazyCounter, 3065 mSolverCounterSat, 2191 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4258 SdHoareTripleChecker+Valid, 6242 SdHoareTripleChecker+Invalid, 5256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2191 IncrementalHoareTripleChecker+Valid, 3065 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.5s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:38,814 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4258 Valid, 6242 Invalid, 5256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2191 Valid, 3065 Invalid, 0 Unknown, 0 Unchecked, 9.5s Time] [2021-12-06 22:48:38,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3431 states. [2021-12-06 22:48:38,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3431 to 3138. [2021-12-06 22:48:38,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3138 states, 2203 states have (on average 1.3858374943259193) internal successors, (3053), 2313 states have internal predecessors, (3053), 742 states have call successors, (742), 184 states have call predecessors, (742), 192 states have return successors, (790), 694 states have call predecessors, (790), 738 states have call successors, (790) [2021-12-06 22:48:38,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3138 states to 3138 states and 4585 transitions. [2021-12-06 22:48:38,934 INFO L78 Accepts]: Start accepts. Automaton has 3138 states and 4585 transitions. Word has length 114 [2021-12-06 22:48:38,934 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:38,934 INFO L470 AbstractCegarLoop]: Abstraction has 3138 states and 4585 transitions. [2021-12-06 22:48:38,935 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:38,935 INFO L276 IsEmpty]: Start isEmpty. Operand 3138 states and 4585 transitions. [2021-12-06 22:48:38,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-12-06 22:48:38,938 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:38,938 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:38,938 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 22:48:38,938 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:38,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:38,939 INFO L85 PathProgramCache]: Analyzing trace with hash 1967333887, now seen corresponding path program 1 times [2021-12-06 22:48:38,939 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:38,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [752045053] [2021-12-06 22:48:38,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:38,939 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:38,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:39,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:39,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:39,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:39,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:39,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:39,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:39,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:39,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:39,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:39,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:39,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:39,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:39,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:39,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:48:39,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:39,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:39,193 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:48:39,193 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:39,193 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [752045053] [2021-12-06 22:48:39,193 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [752045053] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:48:39,193 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:48:39,193 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:48:39,193 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2086597669] [2021-12-06 22:48:39,193 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:48:39,194 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:48:39,194 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:39,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:48:39,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:48:39,195 INFO L87 Difference]: Start difference. First operand 3138 states and 4585 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:45,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:45,066 INFO L93 Difference]: Finished difference Result 9582 states and 14467 transitions. [2021-12-06 22:48:45,066 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:48:45,066 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 115 [2021-12-06 22:48:45,067 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:45,099 INFO L225 Difference]: With dead ends: 9582 [2021-12-06 22:48:45,099 INFO L226 Difference]: Without dead ends: 6467 [2021-12-06 22:48:45,111 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:48:45,112 INFO L933 BasicCegarLoop]: 2337 mSDtfsCounter, 4963 mSDsluCounter, 2589 mSDsCounter, 0 mSdLazyCounter, 1947 mSolverCounterSat, 3183 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5144 SdHoareTripleChecker+Valid, 4926 SdHoareTripleChecker+Invalid, 5130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3183 IncrementalHoareTripleChecker+Valid, 1947 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:45,113 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5144 Valid, 4926 Invalid, 5130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3183 Valid, 1947 Invalid, 0 Unknown, 0 Unchecked, 5.6s Time] [2021-12-06 22:48:45,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6467 states. [2021-12-06 22:48:45,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6467 to 5881. [2021-12-06 22:48:45,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5881 states, 4130 states have (on average 1.3917675544794188) internal successors, (5748), 4345 states have internal predecessors, (5748), 1383 states have call successors, (1383), 350 states have call predecessors, (1383), 367 states have return successors, (1481), 1291 states have call predecessors, (1481), 1379 states have call successors, (1481) [2021-12-06 22:48:45,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5881 states to 5881 states and 8612 transitions. [2021-12-06 22:48:45,339 INFO L78 Accepts]: Start accepts. Automaton has 5881 states and 8612 transitions. Word has length 115 [2021-12-06 22:48:45,339 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:45,339 INFO L470 AbstractCegarLoop]: Abstraction has 5881 states and 8612 transitions. [2021-12-06 22:48:45,339 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:45,340 INFO L276 IsEmpty]: Start isEmpty. Operand 5881 states and 8612 transitions. [2021-12-06 22:48:45,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-12-06 22:48:45,343 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:45,343 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:45,343 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 22:48:45,343 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:45,343 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:45,344 INFO L85 PathProgramCache]: Analyzing trace with hash 857264108, now seen corresponding path program 1 times [2021-12-06 22:48:45,344 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:45,344 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [659151520] [2021-12-06 22:48:45,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:45,344 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:45,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:45,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:45,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:45,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:45,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:45,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:45,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:45,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:45,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:45,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:45,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:45,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:45,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:45,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:45,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:48:45,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:45,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:45,554 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:48:45,555 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:45,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [659151520] [2021-12-06 22:48:45,555 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [659151520] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:48:45,555 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:48:45,555 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:48:45,555 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [228439307] [2021-12-06 22:48:45,555 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:48:45,556 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:48:45,556 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:45,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:48:45,556 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:48:45,557 INFO L87 Difference]: Start difference. First operand 5881 states and 8612 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:49,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:49,642 INFO L93 Difference]: Finished difference Result 6462 states and 9660 transitions. [2021-12-06 22:48:49,642 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:48:49,642 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 116 [2021-12-06 22:48:49,643 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:49,674 INFO L225 Difference]: With dead ends: 6462 [2021-12-06 22:48:49,674 INFO L226 Difference]: Without dead ends: 6459 [2021-12-06 22:48:49,677 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:48:49,678 INFO L933 BasicCegarLoop]: 2037 mSDtfsCounter, 3618 mSDsluCounter, 816 mSDsCounter, 0 mSdLazyCounter, 987 mSolverCounterSat, 1849 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3837 SdHoareTripleChecker+Valid, 2853 SdHoareTripleChecker+Invalid, 2836 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1849 IncrementalHoareTripleChecker+Valid, 987 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:49,678 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3837 Valid, 2853 Invalid, 2836 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1849 Valid, 987 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2021-12-06 22:48:49,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6459 states. [2021-12-06 22:48:49,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6459 to 5880. [2021-12-06 22:48:49,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5880 states, 4130 states have (on average 1.3915254237288135) internal successors, (5747), 4344 states have internal predecessors, (5747), 1382 states have call successors, (1382), 350 states have call predecessors, (1382), 367 states have return successors, (1481), 1291 states have call predecessors, (1481), 1379 states have call successors, (1481) [2021-12-06 22:48:49,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5880 states to 5880 states and 8610 transitions. [2021-12-06 22:48:49,933 INFO L78 Accepts]: Start accepts. Automaton has 5880 states and 8610 transitions. Word has length 116 [2021-12-06 22:48:49,933 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:49,934 INFO L470 AbstractCegarLoop]: Abstraction has 5880 states and 8610 transitions. [2021-12-06 22:48:49,934 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:49,934 INFO L276 IsEmpty]: Start isEmpty. Operand 5880 states and 8610 transitions. [2021-12-06 22:48:49,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-12-06 22:48:49,937 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:49,937 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:49,937 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 22:48:49,937 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:49,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:49,938 INFO L85 PathProgramCache]: Analyzing trace with hash 804844194, now seen corresponding path program 1 times [2021-12-06 22:48:49,938 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:49,938 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [938903997] [2021-12-06 22:48:49,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:49,938 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:50,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:50,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:50,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:50,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:50,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:50,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:50,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:50,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:50,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:50,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:50,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:50,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:50,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:50,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:50,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:48:50,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:50,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:50,197 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:48:50,197 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:50,197 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [938903997] [2021-12-06 22:48:50,197 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [938903997] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:48:50,197 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:48:50,198 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:48:50,198 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1376464627] [2021-12-06 22:48:50,198 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:48:50,198 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:48:50,198 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:50,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:48:50,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:48:50,199 INFO L87 Difference]: Start difference. First operand 5880 states and 8610 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:55,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:55,998 INFO L93 Difference]: Finished difference Result 6461 states and 9658 transitions. [2021-12-06 22:48:55,998 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:48:55,999 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 117 [2021-12-06 22:48:55,999 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:56,030 INFO L225 Difference]: With dead ends: 6461 [2021-12-06 22:48:56,030 INFO L226 Difference]: Without dead ends: 6429 [2021-12-06 22:48:56,035 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:48:56,036 INFO L933 BasicCegarLoop]: 2039 mSDtfsCounter, 3105 mSDsluCounter, 1492 mSDsCounter, 0 mSdLazyCounter, 1676 mSolverCounterSat, 1362 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3323 SdHoareTripleChecker+Valid, 3531 SdHoareTripleChecker+Invalid, 3038 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1362 IncrementalHoareTripleChecker+Valid, 1676 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:56,036 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3323 Valid, 3531 Invalid, 3038 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1362 Valid, 1676 Invalid, 0 Unknown, 0 Unchecked, 5.6s Time] [2021-12-06 22:48:56,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6429 states. [2021-12-06 22:48:56,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6429 to 5850. [2021-12-06 22:48:56,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5850 states, 4114 states have (on average 1.3920758385999028) internal successors, (5727), 4327 states have internal predecessors, (5727), 1369 states have call successors, (1369), 349 states have call predecessors, (1369), 366 states have return successors, (1469), 1279 states have call predecessors, (1469), 1367 states have call successors, (1469) [2021-12-06 22:48:56,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5850 states to 5850 states and 8565 transitions. [2021-12-06 22:48:56,245 INFO L78 Accepts]: Start accepts. Automaton has 5850 states and 8565 transitions. Word has length 117 [2021-12-06 22:48:56,245 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:56,245 INFO L470 AbstractCegarLoop]: Abstraction has 5850 states and 8565 transitions. [2021-12-06 22:48:56,245 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:48:56,246 INFO L276 IsEmpty]: Start isEmpty. Operand 5850 states and 8565 transitions. [2021-12-06 22:48:56,253 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2021-12-06 22:48:56,254 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:56,254 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:56,254 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 22:48:56,254 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:56,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:56,254 INFO L85 PathProgramCache]: Analyzing trace with hash 604265189, now seen corresponding path program 1 times [2021-12-06 22:48:56,255 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:56,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1835708857] [2021-12-06 22:48:56,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:56,255 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:56,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:56,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:56,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:56,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:56,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:56,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:56,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:56,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:56,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:56,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:56,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:56,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:56,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:56,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:56,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:48:56,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:56,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2021-12-06 22:48:56,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-12-06 22:48:56,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-06 22:48:56,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2021-12-06 22:48:56,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2021-12-06 22:48:56,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:56,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2021-12-06 22:48:56,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:56,531 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-12-06 22:48:56,532 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:56,532 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1835708857] [2021-12-06 22:48:56,532 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1835708857] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:48:56,532 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:48:56,532 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 22:48:56,532 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2118928160] [2021-12-06 22:48:56,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:48:56,533 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 22:48:56,533 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:56,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 22:48:56,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:48:56,533 INFO L87 Difference]: Start difference. First operand 5850 states and 8565 transitions. Second operand has 8 states, 8 states have (on average 10.25) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 22:49:07,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:49:07,804 INFO L93 Difference]: Finished difference Result 20074 states and 30434 transitions. [2021-12-06 22:49:07,805 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 22:49:07,805 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 169 [2021-12-06 22:49:07,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:49:07,859 INFO L225 Difference]: With dead ends: 20074 [2021-12-06 22:49:07,859 INFO L226 Difference]: Without dead ends: 14247 [2021-12-06 22:49:07,881 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-12-06 22:49:07,882 INFO L933 BasicCegarLoop]: 2265 mSDtfsCounter, 6469 mSDsluCounter, 4880 mSDsCounter, 0 mSdLazyCounter, 5931 mSolverCounterSat, 5092 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6794 SdHoareTripleChecker+Valid, 7145 SdHoareTripleChecker+Invalid, 11023 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5092 IncrementalHoareTripleChecker+Valid, 5931 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.7s IncrementalHoareTripleChecker+Time [2021-12-06 22:49:07,882 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6794 Valid, 7145 Invalid, 11023 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5092 Valid, 5931 Invalid, 0 Unknown, 0 Unchecked, 10.7s Time] [2021-12-06 22:49:07,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14247 states. [2021-12-06 22:49:08,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14247 to 12562. [2021-12-06 22:49:08,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12562 states, 8738 states have (on average 1.384641794460975) internal successors, (12099), 9249 states have internal predecessors, (12099), 2943 states have call successors, (2943), 677 states have call predecessors, (2943), 880 states have return successors, (3810), 2917 states have call predecessors, (3810), 2941 states have call successors, (3810) [2021-12-06 22:49:08,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12562 states to 12562 states and 18852 transitions. [2021-12-06 22:49:08,367 INFO L78 Accepts]: Start accepts. Automaton has 12562 states and 18852 transitions. Word has length 169 [2021-12-06 22:49:08,368 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:49:08,368 INFO L470 AbstractCegarLoop]: Abstraction has 12562 states and 18852 transitions. [2021-12-06 22:49:08,368 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 22:49:08,368 INFO L276 IsEmpty]: Start isEmpty. Operand 12562 states and 18852 transitions. [2021-12-06 22:49:08,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 209 [2021-12-06 22:49:08,386 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:49:08,386 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:49:08,386 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 22:49:08,387 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:49:08,387 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:49:08,387 INFO L85 PathProgramCache]: Analyzing trace with hash -563103977, now seen corresponding path program 1 times [2021-12-06 22:49:08,387 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:49:08,387 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1110674650] [2021-12-06 22:49:08,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:49:08,387 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:49:08,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:49:08,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:08,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:08,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:49:08,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:08,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:08,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:49:08,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:08,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:08,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:49:08,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:08,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:08,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:49:08,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:08,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:49:08,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:08,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:49:08,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:08,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:08,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2021-12-06 22:49:08,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 149 [2021-12-06 22:49:08,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2021-12-06 22:49:08,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-12-06 22:49:08,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-12-06 22:49:08,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:08,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-06 22:49:08,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:08,693 INFO L134 CoverageAnalysis]: Checked inductivity of 187 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 167 trivial. 0 not checked. [2021-12-06 22:49:08,693 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:49:08,693 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1110674650] [2021-12-06 22:49:08,694 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1110674650] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:49:08,694 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:49:08,694 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 22:49:08,694 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [939812492] [2021-12-06 22:49:08,694 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:49:08,694 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 22:49:08,694 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:49:08,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 22:49:08,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:49:08,695 INFO L87 Difference]: Start difference. First operand 12562 states and 18852 transitions. Second operand has 9 states, 9 states have (on average 11.444444444444445) internal successors, (103), 4 states have internal predecessors, (103), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 22:49:18,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:49:18,205 INFO L93 Difference]: Finished difference Result 29123 states and 44848 transitions. [2021-12-06 22:49:18,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-06 22:49:18,206 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.444444444444445) internal successors, (103), 4 states have internal predecessors, (103), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 208 [2021-12-06 22:49:18,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:49:18,261 INFO L225 Difference]: With dead ends: 29123 [2021-12-06 22:49:18,262 INFO L226 Difference]: Without dead ends: 16584 [2021-12-06 22:49:18,296 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=225, Unknown=0, NotChecked=0, Total=306 [2021-12-06 22:49:18,297 INFO L933 BasicCegarLoop]: 2353 mSDtfsCounter, 5699 mSDsluCounter, 5574 mSDsCounter, 0 mSdLazyCounter, 4819 mSolverCounterSat, 4394 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5969 SdHoareTripleChecker+Valid, 7927 SdHoareTripleChecker+Invalid, 9213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4394 IncrementalHoareTripleChecker+Valid, 4819 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.8s IncrementalHoareTripleChecker+Time [2021-12-06 22:49:18,297 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5969 Valid, 7927 Invalid, 9213 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4394 Valid, 4819 Invalid, 0 Unknown, 0 Unchecked, 8.8s Time] [2021-12-06 22:49:18,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16584 states. [2021-12-06 22:49:18,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16584 to 12576. [2021-12-06 22:49:18,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12576 states, 8752 states have (on average 1.384026508226691) internal successors, (12113), 9263 states have internal predecessors, (12113), 2943 states have call successors, (2943), 677 states have call predecessors, (2943), 880 states have return successors, (3810), 2917 states have call predecessors, (3810), 2941 states have call successors, (3810) [2021-12-06 22:49:18,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12576 states to 12576 states and 18866 transitions. [2021-12-06 22:49:18,824 INFO L78 Accepts]: Start accepts. Automaton has 12576 states and 18866 transitions. Word has length 208 [2021-12-06 22:49:18,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:49:18,824 INFO L470 AbstractCegarLoop]: Abstraction has 12576 states and 18866 transitions. [2021-12-06 22:49:18,825 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.444444444444445) internal successors, (103), 4 states have internal predecessors, (103), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 22:49:18,825 INFO L276 IsEmpty]: Start isEmpty. Operand 12576 states and 18866 transitions. [2021-12-06 22:49:18,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 226 [2021-12-06 22:49:18,848 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:49:18,848 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:49:18,848 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 22:49:18,848 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:49:18,849 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:49:18,849 INFO L85 PathProgramCache]: Analyzing trace with hash -37150978, now seen corresponding path program 1 times [2021-12-06 22:49:18,849 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:49:18,849 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906891700] [2021-12-06 22:49:18,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:49:18,849 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:49:18,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:49:19,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:19,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:19,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:49:19,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:19,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:19,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:49:19,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:19,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:19,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:49:19,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:19,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:19,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:49:19,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:19,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:49:19,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:19,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:49:19,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:19,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:19,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-12-06 22:49:19,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:19,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:19,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-12-06 22:49:19,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-12-06 22:49:19,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-12-06 22:49:19,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-12-06 22:49:19,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-06 22:49:19,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:19,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-12-06 22:49:19,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:19,212 INFO L134 CoverageAnalysis]: Checked inductivity of 257 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 236 trivial. 0 not checked. [2021-12-06 22:49:19,212 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:49:19,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906891700] [2021-12-06 22:49:19,213 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1906891700] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:49:19,213 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:49:19,213 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 22:49:19,213 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [913122025] [2021-12-06 22:49:19,213 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:49:19,213 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 22:49:19,214 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:49:19,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 22:49:19,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:49:19,214 INFO L87 Difference]: Start difference. First operand 12576 states and 18866 transitions. Second operand has 8 states, 8 states have (on average 13.125) internal successors, (105), 3 states have internal predecessors, (105), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 22:49:33,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:49:33,974 INFO L93 Difference]: Finished difference Result 40481 states and 61702 transitions. [2021-12-06 22:49:33,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 22:49:33,975 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 13.125) internal successors, (105), 3 states have internal predecessors, (105), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 225 [2021-12-06 22:49:33,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:49:34,076 INFO L225 Difference]: With dead ends: 40481 [2021-12-06 22:49:34,076 INFO L226 Difference]: Without dead ends: 27928 [2021-12-06 22:49:34,126 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-12-06 22:49:34,127 INFO L933 BasicCegarLoop]: 3459 mSDtfsCounter, 5433 mSDsluCounter, 6104 mSDsCounter, 0 mSdLazyCounter, 6702 mSolverCounterSat, 5202 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5788 SdHoareTripleChecker+Valid, 9563 SdHoareTripleChecker+Invalid, 11904 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5202 IncrementalHoareTripleChecker+Valid, 6702 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.8s IncrementalHoareTripleChecker+Time [2021-12-06 22:49:34,127 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5788 Valid, 9563 Invalid, 11904 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5202 Valid, 6702 Invalid, 0 Unknown, 0 Unchecked, 13.8s Time] [2021-12-06 22:49:34,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27928 states. [2021-12-06 22:49:34,980 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27928 to 24675. [2021-12-06 22:49:34,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24675 states, 17196 states have (on average 1.3851477087694812) internal successors, (23819), 18197 states have internal predecessors, (23819), 5743 states have call successors, (5743), 1328 states have call predecessors, (5743), 1735 states have return successors, (7471), 5693 states have call predecessors, (7471), 5741 states have call successors, (7471) [2021-12-06 22:49:35,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24675 states to 24675 states and 37033 transitions. [2021-12-06 22:49:35,106 INFO L78 Accepts]: Start accepts. Automaton has 24675 states and 37033 transitions. Word has length 225 [2021-12-06 22:49:35,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:49:35,106 INFO L470 AbstractCegarLoop]: Abstraction has 24675 states and 37033 transitions. [2021-12-06 22:49:35,107 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 13.125) internal successors, (105), 3 states have internal predecessors, (105), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 22:49:35,107 INFO L276 IsEmpty]: Start isEmpty. Operand 24675 states and 37033 transitions. [2021-12-06 22:49:35,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 252 [2021-12-06 22:49:35,138 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:49:35,138 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:49:35,138 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 22:49:35,138 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:49:35,139 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:49:35,139 INFO L85 PathProgramCache]: Analyzing trace with hash -67567646, now seen corresponding path program 1 times [2021-12-06 22:49:35,139 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:49:35,139 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1118255765] [2021-12-06 22:49:35,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:49:35,139 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:49:35,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:49:35,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:35,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:35,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:49:35,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:35,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:35,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:49:35,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:35,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:35,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:49:35,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:35,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:35,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:49:35,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:35,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:49:35,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:35,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:49:35,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:35,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:35,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-06 22:49:35,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-12-06 22:49:35,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 143 [2021-12-06 22:49:35,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-12-06 22:49:35,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-12-06 22:49:35,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-06 22:49:35,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-06 22:49:35,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-12-06 22:49:35,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 197 [2021-12-06 22:49:35,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-12-06 22:49:35,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 207 [2021-12-06 22:49:35,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:35,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2021-12-06 22:49:35,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:35,491 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 196 trivial. 0 not checked. [2021-12-06 22:49:35,491 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:49:35,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1118255765] [2021-12-06 22:49:35,491 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1118255765] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:49:35,491 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:49:35,492 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-12-06 22:49:35,492 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [92584161] [2021-12-06 22:49:35,492 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:49:35,492 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-12-06 22:49:35,492 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:49:35,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-12-06 22:49:35,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=85, Unknown=0, NotChecked=0, Total=110 [2021-12-06 22:49:35,493 INFO L87 Difference]: Start difference. First operand 24675 states and 37033 transitions. Second operand has 11 states, 11 states have (on average 10.727272727272727) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2021-12-06 22:49:43,840 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.13s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 22:49:50,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:49:50,624 INFO L93 Difference]: Finished difference Result 42234 states and 63906 transitions. [2021-12-06 22:49:50,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-06 22:49:50,625 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 10.727272727272727) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 251 [2021-12-06 22:49:50,626 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:49:50,686 INFO L225 Difference]: With dead ends: 42234 [2021-12-06 22:49:50,686 INFO L226 Difference]: Without dead ends: 17371 [2021-12-06 22:49:50,737 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=78, Invalid=228, Unknown=0, NotChecked=0, Total=306 [2021-12-06 22:49:50,738 INFO L933 BasicCegarLoop]: 1997 mSDtfsCounter, 2406 mSDsluCounter, 7630 mSDsCounter, 0 mSdLazyCounter, 7543 mSolverCounterSat, 2194 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2552 SdHoareTripleChecker+Valid, 9627 SdHoareTripleChecker+Invalid, 9737 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2194 IncrementalHoareTripleChecker+Valid, 7543 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:49:50,738 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2552 Valid, 9627 Invalid, 9737 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2194 Valid, 7543 Invalid, 0 Unknown, 0 Unchecked, 14.2s Time] [2021-12-06 22:49:50,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17371 states. [2021-12-06 22:49:51,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17371 to 15289. [2021-12-06 22:49:51,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15289 states, 10641 states have (on average 1.3824828493562635) internal successors, (14711), 11263 states have internal predecessors, (14711), 3559 states have call successors, (3559), 834 states have call predecessors, (3559), 1088 states have return successors, (4632), 3525 states have call predecessors, (4632), 3557 states have call successors, (4632) [2021-12-06 22:49:51,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15289 states to 15289 states and 22902 transitions. [2021-12-06 22:49:51,473 INFO L78 Accepts]: Start accepts. Automaton has 15289 states and 22902 transitions. Word has length 251 [2021-12-06 22:49:51,474 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:49:51,474 INFO L470 AbstractCegarLoop]: Abstraction has 15289 states and 22902 transitions. [2021-12-06 22:49:51,474 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 10.727272727272727) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2021-12-06 22:49:51,474 INFO L276 IsEmpty]: Start isEmpty. Operand 15289 states and 22902 transitions. [2021-12-06 22:49:51,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 284 [2021-12-06 22:49:51,510 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:49:51,510 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:49:51,510 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 22:49:51,510 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:49:51,511 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:49:51,511 INFO L85 PathProgramCache]: Analyzing trace with hash 1218724741, now seen corresponding path program 1 times [2021-12-06 22:49:51,511 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:49:51,511 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [136730072] [2021-12-06 22:49:51,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:49:51,511 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:49:51,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:49:51,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:51,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:51,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:49:51,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:51,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:51,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:49:51,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:51,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:51,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:49:51,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:51,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:51,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:49:51,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:51,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:49:51,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:51,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-06 22:49:51,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:49:51,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:51,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:49:51,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:49:51,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:49:51,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:49:51,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:51,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:49:51,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:49:51,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:49:51,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:51,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:51,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:51,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:49:51,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 22:49:52,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-06 22:49:52,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-06 22:49:52,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 22:49:52,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 22:49:52,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:52,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:52,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:52,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:49:52,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 22:49:52,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 22:49:52,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:52,083 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-06 22:49:52,084 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:49:52,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [136730072] [2021-12-06 22:49:52,084 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [136730072] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:49:52,084 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:49:52,084 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 22:49:52,084 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [123374891] [2021-12-06 22:49:52,084 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:49:52,085 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 22:49:52,085 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:49:52,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 22:49:52,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-06 22:49:52,086 INFO L87 Difference]: Start difference. First operand 15289 states and 22902 transitions. Second operand has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:50:06,315 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:06,316 INFO L93 Difference]: Finished difference Result 32633 states and 49455 transitions. [2021-12-06 22:50:06,317 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 22:50:06,317 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 283 [2021-12-06 22:50:06,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:06,372 INFO L225 Difference]: With dead ends: 32633 [2021-12-06 22:50:06,372 INFO L226 Difference]: Without dead ends: 17377 [2021-12-06 22:50:06,408 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-06 22:50:06,408 INFO L933 BasicCegarLoop]: 1871 mSDtfsCounter, 3942 mSDsluCounter, 3897 mSDsCounter, 0 mSdLazyCounter, 5989 mSolverCounterSat, 2472 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4220 SdHoareTripleChecker+Valid, 5768 SdHoareTripleChecker+Invalid, 8461 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2472 IncrementalHoareTripleChecker+Valid, 5989 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:06,409 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4220 Valid, 5768 Invalid, 8461 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2472 Valid, 5989 Invalid, 0 Unknown, 0 Unchecked, 13.2s Time] [2021-12-06 22:50:06,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17377 states. [2021-12-06 22:50:07,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17377 to 15269. [2021-12-06 22:50:07,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15269 states, 10631 states have (on average 1.3819019847615464) internal successors, (14691), 11253 states have internal predecessors, (14691), 3549 states have call successors, (3549), 834 states have call predecessors, (3549), 1088 states have return successors, (4602), 3515 states have call predecessors, (4602), 3547 states have call successors, (4602) [2021-12-06 22:50:07,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15269 states to 15269 states and 22842 transitions. [2021-12-06 22:50:07,161 INFO L78 Accepts]: Start accepts. Automaton has 15269 states and 22842 transitions. Word has length 283 [2021-12-06 22:50:07,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:07,161 INFO L470 AbstractCegarLoop]: Abstraction has 15269 states and 22842 transitions. [2021-12-06 22:50:07,162 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:50:07,162 INFO L276 IsEmpty]: Start isEmpty. Operand 15269 states and 22842 transitions. [2021-12-06 22:50:07,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 282 [2021-12-06 22:50:07,183 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:07,184 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:07,184 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-06 22:50:07,184 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:07,184 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:07,184 INFO L85 PathProgramCache]: Analyzing trace with hash 214519940, now seen corresponding path program 1 times [2021-12-06 22:50:07,184 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:07,184 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1524204563] [2021-12-06 22:50:07,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:07,185 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:07,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:07,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:07,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:07,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:07,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:50:07,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:07,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:50:07,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:07,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:50:07,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:50:07,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-06 22:50:07,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:07,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:07,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:07,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:50:07,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:50:07,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:50:07,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:50:07,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:07,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:07,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:07,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 22:50:07,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-06 22:50:07,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-06 22:50:07,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 22:50:07,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 22:50:07,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:07,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:07,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:50:07,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 22:50:07,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 22:50:07,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:07,644 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-06 22:50:07,644 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:07,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1524204563] [2021-12-06 22:50:07,645 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1524204563] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:07,645 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:07,645 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 22:50:07,645 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1126900146] [2021-12-06 22:50:07,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:07,645 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 22:50:07,646 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:07,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 22:50:07,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-06 22:50:07,646 INFO L87 Difference]: Start difference. First operand 15269 states and 22842 transitions. Second operand has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:50:18,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:18,566 INFO L93 Difference]: Finished difference Result 32593 states and 49330 transitions. [2021-12-06 22:50:18,567 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 22:50:18,567 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 281 [2021-12-06 22:50:18,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:18,620 INFO L225 Difference]: With dead ends: 32593 [2021-12-06 22:50:18,620 INFO L226 Difference]: Without dead ends: 17357 [2021-12-06 22:50:18,653 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-06 22:50:18,654 INFO L933 BasicCegarLoop]: 1864 mSDtfsCounter, 6049 mSDsluCounter, 3356 mSDsCounter, 0 mSdLazyCounter, 4843 mSolverCounterSat, 4757 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6325 SdHoareTripleChecker+Valid, 5220 SdHoareTripleChecker+Invalid, 9600 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4757 IncrementalHoareTripleChecker+Valid, 4843 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.9s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:18,654 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6325 Valid, 5220 Invalid, 9600 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4757 Valid, 4843 Invalid, 0 Unknown, 0 Unchecked, 9.9s Time] [2021-12-06 22:50:18,667 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17357 states. [2021-12-06 22:50:19,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17357 to 15249. [2021-12-06 22:50:19,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15249 states, 10621 states have (on average 1.381320026362866) internal successors, (14671), 11243 states have internal predecessors, (14671), 3539 states have call successors, (3539), 834 states have call predecessors, (3539), 1088 states have return successors, (4572), 3505 states have call predecessors, (4572), 3537 states have call successors, (4572) [2021-12-06 22:50:19,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15249 states to 15249 states and 22782 transitions. [2021-12-06 22:50:19,430 INFO L78 Accepts]: Start accepts. Automaton has 15249 states and 22782 transitions. Word has length 281 [2021-12-06 22:50:19,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:19,431 INFO L470 AbstractCegarLoop]: Abstraction has 15249 states and 22782 transitions. [2021-12-06 22:50:19,431 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:50:19,431 INFO L276 IsEmpty]: Start isEmpty. Operand 15249 states and 22782 transitions. [2021-12-06 22:50:19,452 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 285 [2021-12-06 22:50:19,452 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:19,452 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:19,452 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-06 22:50:19,453 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:19,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:19,453 INFO L85 PathProgramCache]: Analyzing trace with hash 1511917438, now seen corresponding path program 1 times [2021-12-06 22:50:19,453 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:19,453 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [790780775] [2021-12-06 22:50:19,453 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:19,453 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:19,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:19,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:19,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:19,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:19,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:50:19,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:19,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:50:19,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:19,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:50:19,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:50:19,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 22:50:19,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:19,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:19,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:19,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:50:19,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:50:19,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:50:19,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:50:19,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:19,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:19,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:19,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 22:50:19,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-06 22:50:19,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-06 22:50:19,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 22:50:19,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 22:50:19,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:19,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:19,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:50:19,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 22:50:19,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 22:50:19,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:19,908 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-06 22:50:19,908 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:19,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [790780775] [2021-12-06 22:50:19,908 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [790780775] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:19,909 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:19,909 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 22:50:19,909 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1444989297] [2021-12-06 22:50:19,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:19,910 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 22:50:19,910 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:19,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 22:50:19,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-06 22:50:19,910 INFO L87 Difference]: Start difference. First operand 15249 states and 22782 transitions. Second operand has 13 states, 13 states have (on average 12.307692307692308) internal successors, (160), 5 states have internal predecessors, (160), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:50:31,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:31,390 INFO L93 Difference]: Finished difference Result 32553 states and 49205 transitions. [2021-12-06 22:50:31,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 22:50:31,391 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.307692307692308) internal successors, (160), 5 states have internal predecessors, (160), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 284 [2021-12-06 22:50:31,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:31,441 INFO L225 Difference]: With dead ends: 32553 [2021-12-06 22:50:31,441 INFO L226 Difference]: Without dead ends: 17337 [2021-12-06 22:50:31,472 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-06 22:50:31,472 INFO L933 BasicCegarLoop]: 1853 mSDtfsCounter, 4949 mSDsluCounter, 3336 mSDsCounter, 0 mSdLazyCounter, 4966 mSolverCounterSat, 3189 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5221 SdHoareTripleChecker+Valid, 5189 SdHoareTripleChecker+Invalid, 8155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3189 IncrementalHoareTripleChecker+Valid, 4966 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.3s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:31,473 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5221 Valid, 5189 Invalid, 8155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3189 Valid, 4966 Invalid, 0 Unknown, 0 Unchecked, 10.3s Time] [2021-12-06 22:50:31,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17337 states. [2021-12-06 22:50:32,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17337 to 15229. [2021-12-06 22:50:32,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15229 states, 10611 states have (on average 1.38073697106776) internal successors, (14651), 11233 states have internal predecessors, (14651), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1088 states have return successors, (4542), 3495 states have call predecessors, (4542), 3527 states have call successors, (4542) [2021-12-06 22:50:32,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15229 states to 15229 states and 22722 transitions. [2021-12-06 22:50:32,269 INFO L78 Accepts]: Start accepts. Automaton has 15229 states and 22722 transitions. Word has length 284 [2021-12-06 22:50:32,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:32,269 INFO L470 AbstractCegarLoop]: Abstraction has 15229 states and 22722 transitions. [2021-12-06 22:50:32,269 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.307692307692308) internal successors, (160), 5 states have internal predecessors, (160), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:50:32,269 INFO L276 IsEmpty]: Start isEmpty. Operand 15229 states and 22722 transitions. [2021-12-06 22:50:32,291 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 283 [2021-12-06 22:50:32,291 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:32,292 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:32,292 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-12-06 22:50:32,292 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:32,292 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:32,292 INFO L85 PathProgramCache]: Analyzing trace with hash -2007024995, now seen corresponding path program 1 times [2021-12-06 22:50:32,292 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:32,292 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [45176835] [2021-12-06 22:50:32,293 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:32,293 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:32,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:32,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:32,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:32,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:32,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:50:32,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:32,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:50:32,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:32,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:50:32,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:50:32,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-12-06 22:50:32,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:32,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:32,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:32,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:50:32,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:50:32,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:50:32,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:50:32,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:32,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:32,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:50:32,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-06 22:50:32,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-06 22:50:32,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-06 22:50:32,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 22:50:32,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-06 22:50:32,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:32,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:32,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:50:32,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 22:50:32,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 22:50:32,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:32,709 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-06 22:50:32,709 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:32,709 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [45176835] [2021-12-06 22:50:32,709 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [45176835] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:32,709 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:50:32,709 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-06 22:50:32,709 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [383656699] [2021-12-06 22:50:32,710 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:32,710 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 22:50:32,710 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:32,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 22:50:32,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-06 22:50:32,711 INFO L87 Difference]: Start difference. First operand 15229 states and 22722 transitions. Second operand has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:50:35,180 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.16s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 22:50:44,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:44,333 INFO L93 Difference]: Finished difference Result 32513 states and 49080 transitions. [2021-12-06 22:50:44,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 22:50:44,336 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 282 [2021-12-06 22:50:44,336 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:44,387 INFO L225 Difference]: With dead ends: 32513 [2021-12-06 22:50:44,387 INFO L226 Difference]: Without dead ends: 17317 [2021-12-06 22:50:44,416 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-06 22:50:44,416 INFO L933 BasicCegarLoop]: 1900 mSDtfsCounter, 5337 mSDsluCounter, 3413 mSDsCounter, 0 mSdLazyCounter, 4912 mSolverCounterSat, 4001 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5609 SdHoareTripleChecker+Valid, 5313 SdHoareTripleChecker+Invalid, 8913 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4001 IncrementalHoareTripleChecker+Valid, 4912 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.5s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:44,417 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5609 Valid, 5313 Invalid, 8913 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4001 Valid, 4912 Invalid, 0 Unknown, 0 Unchecked, 10.5s Time] [2021-12-06 22:50:44,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17317 states. [2021-12-06 22:50:45,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17317 to 15209. [2021-12-06 22:50:45,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15209 states, 10601 states have (on average 1.380152815772097) internal successors, (14631), 11223 states have internal predecessors, (14631), 3519 states have call successors, (3519), 834 states have call predecessors, (3519), 1088 states have return successors, (4512), 3485 states have call predecessors, (4512), 3517 states have call successors, (4512) [2021-12-06 22:50:45,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15209 states to 15209 states and 22662 transitions. [2021-12-06 22:50:45,253 INFO L78 Accepts]: Start accepts. Automaton has 15209 states and 22662 transitions. Word has length 282 [2021-12-06 22:50:45,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:45,254 INFO L470 AbstractCegarLoop]: Abstraction has 15209 states and 22662 transitions. [2021-12-06 22:50:45,254 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:50:45,254 INFO L276 IsEmpty]: Start isEmpty. Operand 15209 states and 22662 transitions. [2021-12-06 22:50:45,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 301 [2021-12-06 22:50:45,268 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:45,268 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:45,268 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-12-06 22:50:45,268 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:45,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:45,269 INFO L85 PathProgramCache]: Analyzing trace with hash 1203076046, now seen corresponding path program 1 times [2021-12-06 22:50:45,269 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:45,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [808111715] [2021-12-06 22:50:45,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:45,269 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:45,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:45,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:45,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:45,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:45,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:45,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:45,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:50:45,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:45,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:45,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:50:45,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:45,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:45,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:50:45,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:45,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:50:45,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:45,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:50:45,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:45,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:45,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-12-06 22:50:45,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:45,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:45,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-12-06 22:50:45,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-12-06 22:50:45,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-12-06 22:50:45,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-12-06 22:50:45,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-06 22:50:45,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:45,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-12-06 22:50:45,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-12-06 22:50:45,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 221 [2021-12-06 22:50:45,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-12-06 22:50:45,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 234 [2021-12-06 22:50:45,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-12-06 22:50:45,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 247 [2021-12-06 22:50:45,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-12-06 22:50:45,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2021-12-06 22:50:45,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-12-06 22:50:45,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 273 [2021-12-06 22:50:45,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-12-06 22:50:45,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 286 [2021-12-06 22:50:45,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:45,585 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 359 trivial. 0 not checked. [2021-12-06 22:50:45,585 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:45,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [808111715] [2021-12-06 22:50:45,586 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [808111715] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:50:45,586 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [488080760] [2021-12-06 22:50:45,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:45,586 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:50:45,586 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:50:45,587 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:50:45,587 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 22:50:46,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:46,062 INFO L263 TraceCheckSpWp]: Trace formula consists of 2879 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 22:50:46,077 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:50:46,311 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 359 trivial. 0 not checked. [2021-12-06 22:50:46,311 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:50:46,312 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [488080760] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:46,312 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 22:50:46,312 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-12-06 22:50:46,312 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2087449199] [2021-12-06 22:50:46,312 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:46,312 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:50:46,312 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:46,313 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:50:46,313 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2021-12-06 22:50:46,313 INFO L87 Difference]: Start difference. First operand 15209 states and 22662 transitions. Second operand has 5 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-12-06 22:50:47,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:47,633 INFO L93 Difference]: Finished difference Result 27743 states and 41384 transitions. [2021-12-06 22:50:47,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:50:47,634 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 300 [2021-12-06 22:50:47,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:47,687 INFO L225 Difference]: With dead ends: 27743 [2021-12-06 22:50:47,687 INFO L226 Difference]: Without dead ends: 21498 [2021-12-06 22:50:47,702 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 390 GetRequests, 376 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=196, Unknown=0, NotChecked=0, Total=240 [2021-12-06 22:50:47,702 INFO L933 BasicCegarLoop]: 4272 mSDtfsCounter, 2817 mSDsluCounter, 9977 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 242 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2839 SdHoareTripleChecker+Valid, 14249 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 242 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:47,703 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2839 Valid, 14249 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [242 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 22:50:47,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21498 states. [2021-12-06 22:50:48,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21498 to 15233. [2021-12-06 22:50:48,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15233 states, 10615 states have (on average 1.3796514366462553) internal successors, (14645), 11239 states have internal predecessors, (14645), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1088 states have return successors, (4524), 3495 states have call predecessors, (4524), 3527 states have call successors, (4524) [2021-12-06 22:50:48,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15233 states to 15233 states and 22698 transitions. [2021-12-06 22:50:48,584 INFO L78 Accepts]: Start accepts. Automaton has 15233 states and 22698 transitions. Word has length 300 [2021-12-06 22:50:48,584 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:48,584 INFO L470 AbstractCegarLoop]: Abstraction has 15233 states and 22698 transitions. [2021-12-06 22:50:48,584 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-12-06 22:50:48,584 INFO L276 IsEmpty]: Start isEmpty. Operand 15233 states and 22698 transitions. [2021-12-06 22:50:48,599 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 301 [2021-12-06 22:50:48,599 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:48,600 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:48,634 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 22:50:48,800 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:50:48,802 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:48,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:48,803 INFO L85 PathProgramCache]: Analyzing trace with hash -703327220, now seen corresponding path program 1 times [2021-12-06 22:50:48,803 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:48,804 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1399837306] [2021-12-06 22:50:48,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:48,805 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:48,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:49,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:49,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:49,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:49,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:49,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:49,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:50:49,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:49,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:49,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:50:49,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:49,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:49,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:50:49,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:49,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:50:49,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:49,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:50:49,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:49,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:49,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-12-06 22:50:49,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:49,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:49,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-12-06 22:50:49,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-12-06 22:50:49,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-12-06 22:50:49,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-12-06 22:50:49,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-06 22:50:49,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:49,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-12-06 22:50:49,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-12-06 22:50:49,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 221 [2021-12-06 22:50:49,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-12-06 22:50:49,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 234 [2021-12-06 22:50:49,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-12-06 22:50:49,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 247 [2021-12-06 22:50:49,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-12-06 22:50:49,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2021-12-06 22:50:49,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-12-06 22:50:49,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 273 [2021-12-06 22:50:49,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-12-06 22:50:49,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 286 [2021-12-06 22:50:49,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,386 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 357 trivial. 0 not checked. [2021-12-06 22:50:49,386 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:49,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1399837306] [2021-12-06 22:50:49,387 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1399837306] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:50:49,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1116301587] [2021-12-06 22:50:49,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:49,387 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:50:49,387 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:50:49,388 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:50:49,389 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-06 22:50:49,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:49,928 INFO L263 TraceCheckSpWp]: Trace formula consists of 2874 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-06 22:50:49,936 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:50:50,214 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 119 proven. 0 refuted. 0 times theorem prover too weak. 255 trivial. 0 not checked. [2021-12-06 22:50:50,214 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:50:50,214 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1116301587] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:50:50,214 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 22:50:50,214 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2021-12-06 22:50:50,215 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [330841506] [2021-12-06 22:50:50,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:50:50,215 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:50:50,215 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:50,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:50:50,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:50:50,216 INFO L87 Difference]: Start difference. First operand 15233 states and 22698 transitions. Second operand has 6 states, 5 states have (on average 24.6) internal successors, (123), 6 states have internal predecessors, (123), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-12-06 22:50:51,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:51,132 INFO L93 Difference]: Finished difference Result 30477 states and 45444 transitions. [2021-12-06 22:50:51,133 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 22:50:51,133 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.6) internal successors, (123), 6 states have internal predecessors, (123), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) Word has length 300 [2021-12-06 22:50:51,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:51,190 INFO L225 Difference]: With dead ends: 30477 [2021-12-06 22:50:51,190 INFO L226 Difference]: Without dead ends: 15263 [2021-12-06 22:50:51,215 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 388 GetRequests, 373 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=231, Unknown=0, NotChecked=0, Total=272 [2021-12-06 22:50:51,216 INFO L933 BasicCegarLoop]: 2244 mSDtfsCounter, 6 mSDsluCounter, 8962 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11206 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:51,216 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11206 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:50:51,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15263 states. [2021-12-06 22:50:52,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15263 to 15236. [2021-12-06 22:50:52,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15236 states, 10617 states have (on average 1.3796741075633419) internal successors, (14648), 11242 states have internal predecessors, (14648), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1089 states have return successors, (4528), 3495 states have call predecessors, (4528), 3527 states have call successors, (4528) [2021-12-06 22:50:52,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15236 states to 15236 states and 22705 transitions. [2021-12-06 22:50:52,167 INFO L78 Accepts]: Start accepts. Automaton has 15236 states and 22705 transitions. Word has length 300 [2021-12-06 22:50:52,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:52,167 INFO L470 AbstractCegarLoop]: Abstraction has 15236 states and 22705 transitions. [2021-12-06 22:50:52,167 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.6) internal successors, (123), 6 states have internal predecessors, (123), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-12-06 22:50:52,167 INFO L276 IsEmpty]: Start isEmpty. Operand 15236 states and 22705 transitions. [2021-12-06 22:50:52,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 303 [2021-12-06 22:50:52,208 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:52,208 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:52,231 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-06 22:50:52,409 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2021-12-06 22:50:52,410 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:52,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:52,411 INFO L85 PathProgramCache]: Analyzing trace with hash -1296151014, now seen corresponding path program 1 times [2021-12-06 22:50:52,412 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:52,412 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [860141152] [2021-12-06 22:50:52,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:52,413 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:52,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:50:52,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:52,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:52,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:50:52,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:52,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:52,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:50:52,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:52,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:52,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:50:52,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:52,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:52,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:50:52,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:52,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-06 22:50:52,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:52,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 22:50:52,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:52,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:52,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-12-06 22:50:52,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:52,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:50:52,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-12-06 22:50:52,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-12-06 22:50:52,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-06 22:50:52,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-06 22:50:52,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-06 22:50:52,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:50:52,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2021-12-06 22:50:52,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 219 [2021-12-06 22:50:52,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 223 [2021-12-06 22:50:52,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 232 [2021-12-06 22:50:52,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-12-06 22:50:52,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 245 [2021-12-06 22:50:52,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2021-12-06 22:50:52,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 258 [2021-12-06 22:50:52,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 262 [2021-12-06 22:50:52,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2021-12-06 22:50:52,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 275 [2021-12-06 22:50:52,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 284 [2021-12-06 22:50:52,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 288 [2021-12-06 22:50:52,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:52,833 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 362 trivial. 0 not checked. [2021-12-06 22:50:52,834 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:50:52,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [860141152] [2021-12-06 22:50:52,834 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [860141152] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:50:52,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2045100633] [2021-12-06 22:50:52,834 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:52,834 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:50:52,834 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:50:52,835 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:50:52,836 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-06 22:50:53,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:50:53,401 INFO L263 TraceCheckSpWp]: Trace formula consists of 2904 conjuncts, 18 conjunts are in the unsatisfiable core [2021-12-06 22:50:53,407 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:50:53,796 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 124 proven. 1 refuted. 0 times theorem prover too weak. 254 trivial. 0 not checked. [2021-12-06 22:50:53,796 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:50:54,342 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 368 trivial. 0 not checked. [2021-12-06 22:50:54,343 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2045100633] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:50:54,343 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:50:54,343 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 7, 7] total 20 [2021-12-06 22:50:54,343 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [561004803] [2021-12-06 22:50:54,343 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:50:54,344 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-12-06 22:50:54,344 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:50:54,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-12-06 22:50:54,344 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2021-12-06 22:50:54,344 INFO L87 Difference]: Start difference. First operand 15236 states and 22705 transitions. Second operand has 20 states, 18 states have (on average 11.444444444444445) internal successors, (206), 13 states have internal predecessors, (206), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 22:51:12,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:12,853 INFO L93 Difference]: Finished difference Result 32569 states and 49182 transitions. [2021-12-06 22:51:12,855 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-06 22:51:12,855 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 18 states have (on average 11.444444444444445) internal successors, (206), 13 states have internal predecessors, (206), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) Word has length 302 [2021-12-06 22:51:12,856 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:12,920 INFO L225 Difference]: With dead ends: 32569 [2021-12-06 22:51:12,920 INFO L226 Difference]: Without dead ends: 17352 [2021-12-06 22:51:12,954 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 705 GetRequests, 674 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=169, Invalid=887, Unknown=0, NotChecked=0, Total=1056 [2021-12-06 22:51:12,954 INFO L933 BasicCegarLoop]: 2033 mSDtfsCounter, 3527 mSDsluCounter, 18755 mSDsCounter, 0 mSdLazyCounter, 14094 mSolverCounterSat, 3351 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3673 SdHoareTripleChecker+Valid, 20788 SdHoareTripleChecker+Invalid, 17445 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3351 IncrementalHoareTripleChecker+Valid, 14094 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:12,955 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3673 Valid, 20788 Invalid, 17445 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3351 Valid, 14094 Invalid, 0 Unknown, 0 Unchecked, 17.0s Time] [2021-12-06 22:51:12,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17352 states. [2021-12-06 22:51:13,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17352 to 15249. [2021-12-06 22:51:13,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15249 states, 10628 states have (on average 1.3793752352277004) internal successors, (14660), 11251 states have internal predecessors, (14660), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1091 states have return successors, (4537), 3499 states have call predecessors, (4537), 3527 states have call successors, (4537) [2021-12-06 22:51:13,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15249 states to 15249 states and 22726 transitions. [2021-12-06 22:51:13,857 INFO L78 Accepts]: Start accepts. Automaton has 15249 states and 22726 transitions. Word has length 302 [2021-12-06 22:51:13,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:13,858 INFO L470 AbstractCegarLoop]: Abstraction has 15249 states and 22726 transitions. [2021-12-06 22:51:13,858 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 18 states have (on average 11.444444444444445) internal successors, (206), 13 states have internal predecessors, (206), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 22:51:13,858 INFO L276 IsEmpty]: Start isEmpty. Operand 15249 states and 22726 transitions. [2021-12-06 22:51:13,873 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 311 [2021-12-06 22:51:13,873 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:13,874 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:13,904 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-12-06 22:51:14,074 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2021-12-06 22:51:14,075 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:14,075 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:14,075 INFO L85 PathProgramCache]: Analyzing trace with hash -157963250, now seen corresponding path program 1 times [2021-12-06 22:51:14,075 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:51:14,075 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1093715672] [2021-12-06 22:51:14,075 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:14,075 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:51:14,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:51:14,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:14,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:14,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:51:14,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:14,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:14,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:51:14,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:14,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:14,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:51:14,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:14,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:14,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:51:14,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:14,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-06 22:51:14,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:14,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-06 22:51:14,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:14,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:14,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-12-06 22:51:14,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:14,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:14,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-12-06 22:51:14,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:51:14,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-12-06 22:51:14,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-06 22:51:14,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 186 [2021-12-06 22:51:14,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-12-06 22:51:14,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:14,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-12-06 22:51:14,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-12-06 22:51:14,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2021-12-06 22:51:14,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-12-06 22:51:14,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 244 [2021-12-06 22:51:14,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-12-06 22:51:14,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 257 [2021-12-06 22:51:14,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-12-06 22:51:14,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2021-12-06 22:51:14,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-12-06 22:51:14,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2021-12-06 22:51:14,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-12-06 22:51:14,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 296 [2021-12-06 22:51:14,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:14,506 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 395 trivial. 0 not checked. [2021-12-06 22:51:14,506 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:51:14,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1093715672] [2021-12-06 22:51:14,506 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1093715672] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:14,506 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:14,507 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2021-12-06 22:51:14,507 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [910549529] [2021-12-06 22:51:14,507 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:14,507 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-06 22:51:14,507 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:51:14,507 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-06 22:51:14,508 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:51:14,508 INFO L87 Difference]: Start difference. First operand 15249 states and 22726 transitions. Second operand has 15 states, 14 states have (on average 8.714285714285714) internal successors, (122), 7 states have internal predecessors, (122), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-12-06 22:51:32,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:32,892 INFO L93 Difference]: Finished difference Result 22169 states and 33954 transitions. [2021-12-06 22:51:32,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-06 22:51:32,893 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 8.714285714285714) internal successors, (122), 7 states have internal predecessors, (122), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) Word has length 310 [2021-12-06 22:51:32,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:32,951 INFO L225 Difference]: With dead ends: 22169 [2021-12-06 22:51:32,951 INFO L226 Difference]: Without dead ends: 18622 [2021-12-06 22:51:32,963 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=124, Invalid=428, Unknown=0, NotChecked=0, Total=552 [2021-12-06 22:51:32,963 INFO L933 BasicCegarLoop]: 2664 mSDtfsCounter, 3406 mSDsluCounter, 18875 mSDsCounter, 0 mSdLazyCounter, 11323 mSolverCounterSat, 2798 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3705 SdHoareTripleChecker+Valid, 21539 SdHoareTripleChecker+Invalid, 14121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2798 IncrementalHoareTripleChecker+Valid, 11323 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:32,963 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3705 Valid, 21539 Invalid, 14121 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2798 Valid, 11323 Invalid, 0 Unknown, 0 Unchecked, 17.0s Time] [2021-12-06 22:51:32,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18622 states. [2021-12-06 22:51:33,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18622 to 15259. [2021-12-06 22:51:33,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15259 states, 10634 states have (on average 1.3791611811171713) internal successors, (14666), 11257 states have internal predecessors, (14666), 3531 states have call successors, (3531), 834 states have call predecessors, (3531), 1093 states have return successors, (4545), 3503 states have call predecessors, (4545), 3529 states have call successors, (4545) [2021-12-06 22:51:33,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15259 states to 15259 states and 22742 transitions. [2021-12-06 22:51:33,922 INFO L78 Accepts]: Start accepts. Automaton has 15259 states and 22742 transitions. Word has length 310 [2021-12-06 22:51:33,922 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:33,922 INFO L470 AbstractCegarLoop]: Abstraction has 15259 states and 22742 transitions. [2021-12-06 22:51:33,923 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 8.714285714285714) internal successors, (122), 7 states have internal predecessors, (122), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-12-06 22:51:33,923 INFO L276 IsEmpty]: Start isEmpty. Operand 15259 states and 22742 transitions. [2021-12-06 22:51:33,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-12-06 22:51:33,937 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:33,938 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:33,938 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-12-06 22:51:33,938 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:33,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:33,938 INFO L85 PathProgramCache]: Analyzing trace with hash 1550664252, now seen corresponding path program 1 times [2021-12-06 22:51:33,938 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:51:33,938 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [741308318] [2021-12-06 22:51:33,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:33,938 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:51:34,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:51:34,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:34,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:34,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:51:34,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:34,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:34,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:51:34,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:34,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:34,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:51:34,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:34,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:34,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:51:34,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:34,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-06 22:51:34,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:34,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-06 22:51:34,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:34,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:34,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-12-06 22:51:34,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:34,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:51:34,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-12-06 22:51:34,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:51:34,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-12-06 22:51:34,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-06 22:51:34,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 186 [2021-12-06 22:51:34,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-12-06 22:51:34,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:51:34,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-12-06 22:51:34,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-12-06 22:51:34,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2021-12-06 22:51:34,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-12-06 22:51:34,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 244 [2021-12-06 22:51:34,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-12-06 22:51:34,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 257 [2021-12-06 22:51:34,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-12-06 22:51:34,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2021-12-06 22:51:34,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-12-06 22:51:34,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2021-12-06 22:51:34,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-12-06 22:51:34,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 296 [2021-12-06 22:51:34,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:34,499 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 394 trivial. 0 not checked. [2021-12-06 22:51:34,500 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:51:34,500 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [741308318] [2021-12-06 22:51:34,500 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [741308318] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:51:34,500 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [175461697] [2021-12-06 22:51:34,500 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:34,500 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:51:34,500 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:51:34,501 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:51:34,502 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-06 22:51:35,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:35,225 INFO L263 TraceCheckSpWp]: Trace formula consists of 2961 conjuncts, 26 conjunts are in the unsatisfiable core [2021-12-06 22:51:35,230 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:35,698 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 128 proven. 19 refuted. 0 times theorem prover too weak. 265 trivial. 0 not checked. [2021-12-06 22:51:35,698 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:51:36,304 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 394 trivial. 0 not checked. [2021-12-06 22:51:36,305 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [175461697] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:51:36,305 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:51:36,305 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 8] total 25 [2021-12-06 22:51:36,305 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [917966657] [2021-12-06 22:51:36,305 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:51:36,306 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2021-12-06 22:51:36,306 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:51:36,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2021-12-06 22:51:36,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=527, Unknown=0, NotChecked=0, Total=600 [2021-12-06 22:51:36,307 INFO L87 Difference]: Start difference. First operand 15259 states and 22742 transitions. Second operand has 25 states, 23 states have (on average 7.826086956521739) internal successors, (180), 19 states have internal predecessors, (180), 4 states have call successors, (79), 8 states have call predecessors, (79), 8 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 22:52:03,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:03,779 INFO L93 Difference]: Finished difference Result 32616 states and 49314 transitions. [2021-12-06 22:52:03,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2021-12-06 22:52:03,780 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 23 states have (on average 7.826086956521739) internal successors, (180), 19 states have internal predecessors, (180), 4 states have call successors, (79), 8 states have call predecessors, (79), 8 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) Word has length 311 [2021-12-06 22:52:03,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:03,831 INFO L225 Difference]: With dead ends: 32616 [2021-12-06 22:52:03,831 INFO L226 Difference]: Without dead ends: 17376 [2021-12-06 22:52:03,859 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 730 GetRequests, 687 SyntacticMatches, 3 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 328 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=280, Invalid=1442, Unknown=0, NotChecked=0, Total=1722 [2021-12-06 22:52:03,860 INFO L933 BasicCegarLoop]: 2033 mSDtfsCounter, 3545 mSDsluCounter, 22602 mSDsCounter, 0 mSdLazyCounter, 17566 mSolverCounterSat, 3345 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 22.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3690 SdHoareTripleChecker+Valid, 24635 SdHoareTripleChecker+Invalid, 20911 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3345 IncrementalHoareTripleChecker+Valid, 17566 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 25.6s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:03,860 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3690 Valid, 24635 Invalid, 20911 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3345 Valid, 17566 Invalid, 0 Unknown, 0 Unchecked, 25.6s Time] [2021-12-06 22:52:03,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17376 states. [2021-12-06 22:52:04,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17376 to 15262. [2021-12-06 22:52:04,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15262 states, 10637 states have (on average 1.3791482560872426) internal successors, (14670), 11259 states have internal predecessors, (14670), 3531 states have call successors, (3531), 835 states have call predecessors, (3531), 1093 states have return successors, (4545), 3503 states have call predecessors, (4545), 3529 states have call successors, (4545) [2021-12-06 22:52:04,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15262 states to 15262 states and 22746 transitions. [2021-12-06 22:52:04,811 INFO L78 Accepts]: Start accepts. Automaton has 15262 states and 22746 transitions. Word has length 311 [2021-12-06 22:52:04,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:04,812 INFO L470 AbstractCegarLoop]: Abstraction has 15262 states and 22746 transitions. [2021-12-06 22:52:04,812 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 23 states have (on average 7.826086956521739) internal successors, (180), 19 states have internal predecessors, (180), 4 states have call successors, (79), 8 states have call predecessors, (79), 8 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 22:52:04,812 INFO L276 IsEmpty]: Start isEmpty. Operand 15262 states and 22746 transitions. [2021-12-06 22:52:04,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 314 [2021-12-06 22:52:04,826 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:04,826 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:04,851 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-12-06 22:52:05,027 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2021-12-06 22:52:05,028 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:05,028 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:05,029 INFO L85 PathProgramCache]: Analyzing trace with hash -804403218, now seen corresponding path program 2 times [2021-12-06 22:52:05,029 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:05,030 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [919485163] [2021-12-06 22:52:05,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:05,030 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:05,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:05,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:05,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:52:05,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:52:05,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:05,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:52:05,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:52:05,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:05,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:52:05,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:52:05,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:05,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:52:05,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:52:05,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:05,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-06 22:52:05,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:05,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-06 22:52:05,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:05,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:52:05,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2021-12-06 22:52:05,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:05,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:52:05,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-06 22:52:05,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:52:05,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-06 22:52:05,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-06 22:52:05,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-12-06 22:52:05,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 193 [2021-12-06 22:52:05,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:52:05,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2021-12-06 22:52:05,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 229 [2021-12-06 22:52:05,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 233 [2021-12-06 22:52:05,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 242 [2021-12-06 22:52:05,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 246 [2021-12-06 22:52:05,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 255 [2021-12-06 22:52:05,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 259 [2021-12-06 22:52:05,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 268 [2021-12-06 22:52:05,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 272 [2021-12-06 22:52:05,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 281 [2021-12-06 22:52:05,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 285 [2021-12-06 22:52:05,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 294 [2021-12-06 22:52:05,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 298 [2021-12-06 22:52:05,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:05,638 INFO L134 CoverageAnalysis]: Checked inductivity of 425 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 397 trivial. 0 not checked. [2021-12-06 22:52:05,638 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:52:05,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [919485163] [2021-12-06 22:52:05,638 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [919485163] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:52:05,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [766814551] [2021-12-06 22:52:05,638 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 22:52:05,639 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:52:05,639 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:52:05,639 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:52:05,640 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-12-06 22:52:06,643 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-12-06 22:52:06,643 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:52:06,656 INFO L263 TraceCheckSpWp]: Trace formula consists of 2991 conjuncts, 30 conjunts are in the unsatisfiable core [2021-12-06 22:52:06,661 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:52:07,052 INFO L134 CoverageAnalysis]: Checked inductivity of 425 backedges. 152 proven. 6 refuted. 0 times theorem prover too weak. 267 trivial. 0 not checked. [2021-12-06 22:52:07,052 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:52:07,799 INFO L134 CoverageAnalysis]: Checked inductivity of 425 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 397 trivial. 0 not checked. [2021-12-06 22:52:07,799 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [766814551] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:52:07,799 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:52:07,799 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9, 9] total 24 [2021-12-06 22:52:07,799 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1444745019] [2021-12-06 22:52:07,799 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:52:07,800 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-12-06 22:52:07,800 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:52:07,801 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-12-06 22:52:07,801 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=481, Unknown=0, NotChecked=0, Total=552 [2021-12-06 22:52:07,801 INFO L87 Difference]: Start difference. First operand 15262 states and 22746 transitions. Second operand has 24 states, 22 states have (on average 8.272727272727273) internal successors, (182), 18 states have internal predecessors, (182), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-12-06 22:52:39,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:39,674 INFO L93 Difference]: Finished difference Result 32649 states and 49427 transitions. [2021-12-06 22:52:39,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-06 22:52:39,675 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 22 states have (on average 8.272727272727273) internal successors, (182), 18 states have internal predecessors, (182), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 313 [2021-12-06 22:52:39,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:39,723 INFO L225 Difference]: With dead ends: 32649 [2021-12-06 22:52:39,724 INFO L226 Difference]: Without dead ends: 17406 [2021-12-06 22:52:39,752 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 733 GetRequests, 693 SyntacticMatches, 3 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 252 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=237, Invalid=1245, Unknown=0, NotChecked=0, Total=1482 [2021-12-06 22:52:39,753 INFO L933 BasicCegarLoop]: 2010 mSDtfsCounter, 3558 mSDsluCounter, 17727 mSDsCounter, 0 mSdLazyCounter, 14112 mSolverCounterSat, 3379 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 25.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3710 SdHoareTripleChecker+Valid, 19737 SdHoareTripleChecker+Invalid, 17491 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3379 IncrementalHoareTripleChecker+Valid, 14112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 29.9s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:39,753 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3710 Valid, 19737 Invalid, 17491 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3379 Valid, 14112 Invalid, 0 Unknown, 0 Unchecked, 29.9s Time] [2021-12-06 22:52:39,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17406 states. [2021-12-06 22:52:40,663 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17406 to 15263. [2021-12-06 22:52:40,672 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15263 states, 10638 states have (on average 1.379206617785298) internal successors, (14672), 11260 states have internal predecessors, (14672), 3531 states have call successors, (3531), 835 states have call predecessors, (3531), 1093 states have return successors, (4545), 3503 states have call predecessors, (4545), 3529 states have call successors, (4545) [2021-12-06 22:52:40,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15263 states to 15263 states and 22748 transitions. [2021-12-06 22:52:40,718 INFO L78 Accepts]: Start accepts. Automaton has 15263 states and 22748 transitions. Word has length 313 [2021-12-06 22:52:40,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:40,718 INFO L470 AbstractCegarLoop]: Abstraction has 15263 states and 22748 transitions. [2021-12-06 22:52:40,719 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 22 states have (on average 8.272727272727273) internal successors, (182), 18 states have internal predecessors, (182), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-12-06 22:52:40,719 INFO L276 IsEmpty]: Start isEmpty. Operand 15263 states and 22748 transitions. [2021-12-06 22:52:40,755 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 316 [2021-12-06 22:52:40,755 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:40,756 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:40,781 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2021-12-06 22:52:40,956 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:52:40,957 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:40,958 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:40,958 INFO L85 PathProgramCache]: Analyzing trace with hash -1100694020, now seen corresponding path program 3 times [2021-12-06 22:52:40,959 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:52:40,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1332082905] [2021-12-06 22:52:40,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:40,960 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:52:41,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 22:52:41,683 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 22:52:42,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 22:52:42,371 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 22:52:42,371 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 22:52:42,372 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 22:52:42,373 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-12-06 22:52:42,375 INFO L732 BasicCegarLoop]: Path program histogram: [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:42,378 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 22:52:42,447 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 22:52:42,450 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 22:52:42,884 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 10:52:42 BoogieIcfgContainer [2021-12-06 22:52:42,884 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 22:52:42,884 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 22:52:42,884 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 22:52:42,884 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 22:52:42,885 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:48:23" (3/4) ... [2021-12-06 22:52:42,887 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 22:52:42,887 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 22:52:42,888 INFO L158 Benchmark]: Toolchain (without parser) took 265315.27ms. Allocated memory was 119.5MB in the beginning and 3.6GB in the end (delta: 3.4GB). Free memory was 93.2MB in the beginning and 1.4GB in the end (delta: -1.3GB). Peak memory consumption was 2.1GB. Max. memory is 16.1GB. [2021-12-06 22:52:42,888 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 119.5MB. Free memory is still 93.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:52:42,888 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1609.61ms. Allocated memory was 119.5MB in the beginning and 176.2MB in the end (delta: 56.6MB). Free memory was 92.9MB in the beginning and 103.8MB in the end (delta: -10.8MB). Peak memory consumption was 83.9MB. Max. memory is 16.1GB. [2021-12-06 22:52:42,888 INFO L158 Benchmark]: Boogie Procedure Inliner took 172.90ms. Allocated memory is still 176.2MB. Free memory was 103.8MB in the beginning and 78.6MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2021-12-06 22:52:42,889 INFO L158 Benchmark]: Boogie Preprocessor took 158.73ms. Allocated memory is still 176.2MB. Free memory was 78.6MB in the beginning and 88.3MB in the end (delta: -9.7MB). Peak memory consumption was 23.5MB. Max. memory is 16.1GB. [2021-12-06 22:52:42,889 INFO L158 Benchmark]: RCFGBuilder took 3912.79ms. Allocated memory was 176.2MB in the beginning and 239.1MB in the end (delta: 62.9MB). Free memory was 88.3MB in the beginning and 76.5MB in the end (delta: 11.8MB). Peak memory consumption was 78.9MB. Max. memory is 16.1GB. [2021-12-06 22:52:42,889 INFO L158 Benchmark]: TraceAbstraction took 259453.96ms. Allocated memory was 239.1MB in the beginning and 3.6GB in the end (delta: 3.3GB). Free memory was 76.5MB in the beginning and 1.4GB in the end (delta: -1.3GB). Peak memory consumption was 2.0GB. Max. memory is 16.1GB. [2021-12-06 22:52:42,889 INFO L158 Benchmark]: Witness Printer took 2.93ms. Allocated memory is still 3.6GB. Free memory was 1.4GB in the beginning and 1.4GB in the end (delta: 312.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:52:42,891 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 119.5MB. Free memory is still 93.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1609.61ms. Allocated memory was 119.5MB in the beginning and 176.2MB in the end (delta: 56.6MB). Free memory was 92.9MB in the beginning and 103.8MB in the end (delta: -10.8MB). Peak memory consumption was 83.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 172.90ms. Allocated memory is still 176.2MB. Free memory was 103.8MB in the beginning and 78.6MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 158.73ms. Allocated memory is still 176.2MB. Free memory was 78.6MB in the beginning and 88.3MB in the end (delta: -9.7MB). Peak memory consumption was 23.5MB. Max. memory is 16.1GB. * RCFGBuilder took 3912.79ms. Allocated memory was 176.2MB in the beginning and 239.1MB in the end (delta: 62.9MB). Free memory was 88.3MB in the beginning and 76.5MB in the end (delta: 11.8MB). Peak memory consumption was 78.9MB. Max. memory is 16.1GB. * TraceAbstraction took 259453.96ms. Allocated memory was 239.1MB in the beginning and 3.6GB in the end (delta: 3.3GB). Free memory was 76.5MB in the beginning and 1.4GB in the end (delta: -1.3GB). Peak memory consumption was 2.0GB. Max. memory is 16.1GB. * Witness Printer took 2.93ms. Allocated memory is still 3.6GB. Free memory was 1.4GB in the beginning and 1.4GB in the end (delta: 312.3kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8176]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6875. Possible FailurePath: [L4318] int ldv_timer_state_5 = 0; [L4319] int ldv_state_variable_8 ; [L4320] struct timer_list *ldv_timer_list_5 ; [L4321] struct timer_list *ldv_timer_list_4 ; [L4322] struct work_struct *ldv_work_struct_3_1 ; [L4323] struct mmc_host *vub300_mmc_ops_group0 ; [L4324] struct work_struct *ldv_work_struct_1_3 ; [L4325] int ldv_state_variable_0 ; [L4326] int ldv_state_variable_5 ; [L4327] int ldv_work_1_1 ; [L4328] int ldv_work_3_2 ; [L4329] int ldv_work_3_0 ; [L4330] struct work_struct *ldv_work_struct_2_3 ; [L4331] struct work_struct *ldv_work_struct_2_0 ; [L4332] int ldv_timer_state_6 = 0; [L4333] struct work_struct *ldv_work_struct_2_2 ; [L4334] int ldv_timer_state_4 = 0; [L4335] int ref_cnt ; [L4336] int ldv_work_3_3 ; [L4337] int ldv_state_variable_1 ; [L4338] int ldv_state_variable_7 ; [L4339] struct work_struct *ldv_work_struct_3_3 ; [L4340] struct work_struct *ldv_work_struct_1_0 ; [L4341] struct work_struct *ldv_work_struct_1_1 ; [L4342] int ldv_work_1_3 ; [L4343] struct work_struct *ldv_work_struct_2_1 ; [L4344] struct timer_list *ldv_timer_list_6 ; [L4345] struct work_struct *ldv_work_struct_3_2 ; [L4346] int ldv_state_variable_6 ; [L4347] int ldv_work_3_1 ; [L4348] int ldv_state_variable_2 ; [L4349] int ldv_work_2_0 ; [L4350] int usb_counter ; [L4351] struct work_struct *ldv_work_struct_3_0 ; [L4352] int ldv_work_1_2 ; [L4353] int LDV_IN_INTERRUPT = 1; [L4354] struct work_struct *ldv_work_struct_1_2 ; [L4355] int ldv_work_2_2 ; [L4356] int ldv_state_variable_3 ; [L4357] struct usb_interface *vub300_driver_group1 ; [L4358] int ldv_work_1_0 ; [L4359] int ldv_work_2_3 ; [L4360] int ldv_state_variable_4 ; [L4361] int ldv_work_2_1 ; [L4422] static bool limit_speed_to_24_MHz ; [L4423] static bool pad_input_to_usb_pkt ; [L4424] static bool disable_offload_processing ; [L4425] static bool force_1_bit_data_xfers ; [L4426] static bool force_polling_for_irqs ; [L4427] static int firmware_irqpoll_timeout = 1024; [L4428] static int force_max_req_size = 128; [L4429] static int firmware_rom_wait_states = 28; [L4430-L4435] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4436] struct usb_device_id const __mod_usb_device_table ; [L4437] static struct workqueue_struct *cmndworkqueue ; [L4438] static struct workqueue_struct *pollworkqueue ; [L4439] static struct workqueue_struct *deadworkqueue ; [L6425-L6427] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6835-L6841] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6914] int ldv_retval_0 ; [L6916] int ldv_retval_1 ; [L6919] int ldv_retval_3 ; [L6920] int ldv_retval_2 ; [L8179] int URB_STATE = 0; [L8180] int DEV_STATE = 0; [L8181] int INTERF_STATE = 0; [L8182] int SERIAL_STATE = 0; [L8183] void *usb_intfdata = (void *)0; [L8184] struct urb *int_urb = (struct urb *)0; [L8185] struct urb *bulk_urb = (struct urb *)0; [L8186] void (*completeFnInt)(struct urb * ) ; [L8187] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7559] struct usb_device_id *ldvarg1 ; [L7560] void *tmp ; [L7561] pm_message_t ldvarg0 ; [L7562] struct mmc_card *ldvarg4 ; [L7563] void *tmp___0 ; [L7564] struct mmc_ios *ldvarg3 ; [L7565] void *tmp___1 ; [L7566] int ldvarg5 ; [L7567] struct mmc_request *ldvarg2 ; [L7568] void *tmp___2 ; [L7569] int tmp___3 ; [L7570] int tmp___4 ; [L7571] int tmp___5 ; [L7572] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] tmp = ldv_init_zalloc(32UL) [L7575] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] CALL, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1816, \result={-73786976294838206465:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] RET, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1816UL)={-73786976294838206465:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] tmp___0 = ldv_init_zalloc(1816UL) [L7577] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={-92233720368547758081:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] tmp___1 = ldv_init_zalloc(16UL) [L7579] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103231:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103231:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103231:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103231:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103231:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={-36893488147419103231:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103231:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103231:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={-36893488147419103231:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] tmp___2 = ldv_init_zalloc(136UL) [L7581] ldvarg2 = (struct mmc_request *)tmp___2 [L7582] FCALL ldv_initialize() [L7583] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={90:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={90:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, tmp={90:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7583] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={90:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7584] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, s={89:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={89:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, s={89:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={89:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, s={89:0}, SERIAL_STATE=0, tmp={89:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7584] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={89:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7585] ldv_state_variable_6 = 1 [L7586] CALL work_init_3() [L6924] ldv_work_3_0 = 0 [L6925] ldv_work_3_1 = 0 [L6926] ldv_work_3_2 = 0 [L6927] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7586] RET work_init_3() [L7587] ldv_state_variable_3 = 1 [L7588] ldv_state_variable_7 = 0 [L7589] CALL work_init_2() [L6974] ldv_work_2_0 = 0 [L6975] ldv_work_2_1 = 0 [L6976] ldv_work_2_2 = 0 [L6977] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7589] RET work_init_2() [L7590] ldv_state_variable_2 = 1 [L7591] ldv_state_variable_8 = 0 [L7592] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7592] RET work_init_1() [L7593] ldv_state_variable_1 = 1 [L7594] ldv_state_variable_4 = 1 [L7595] ref_cnt = 0 [L7596] ldv_state_variable_0 = 1 [L7597] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, tmp___3=7, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: [L7752] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7753] COND TRUE ldv_state_variable_0 == 1 [L7754] CALL, EXPR vub300_init() [L6844] int result ; [L6845] struct lock_class_key __key ; [L6846] char const *__lock_name ; [L6847] struct workqueue_struct *tmp ; [L6848] struct lock_class_key __key___0 ; [L6849] char const *__lock_name___0 ; [L6850] struct workqueue_struct *tmp___0 ; [L6851] struct lock_class_key __key___1 ; [L6852] char const *__lock_name___1 ; [L6853] struct workqueue_struct *tmp___1 ; [L6857] __lock_name = "kvub300c" [L6858] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6859] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __key={91:0}, __key___0={93:0}, __key___1={94:0}, __lock_name={73:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6860] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6866] __lock_name___0 = "kvub300p" [L6867] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6868] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={91:0}, __key___0={93:0}, __key___1={94:0}, __lock_name={73:0}, __lock_name___0={76:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6869] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6875] __lock_name___1 = "kvub300d" [L6876] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6877] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={91:0}, __key___0={93:0}, __key___1={94:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6878] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] CALL, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L8081] ldv_func_ret_type___12 ldv_func_res ; [L8082] int tmp ; [L8084] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8556] return __VERIFIER_nondet_int(); [L8084] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8084] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8085] ldv_func_res = tmp [L8086] ldv_state_variable_7 = 1 [L8087] usb_counter = 0 [L8088] CALL ldv_usb_driver_7() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={-36893488147419103233:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={-36893488147419103233:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L8088] RET ldv_usb_driver_7() [L8089] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={86:0}, ldv_func_arg1={86:0}, ldv_func_arg2={8707:8706}, ldv_func_arg2={8707:8706}, ldv_func_arg3={82:0}, ldv_func_arg3={82:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6884] RET, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6884] result = ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6885] COND FALSE !(result != 0) [L6890] return (0); [L6890] return (0); [L6890] return (0); [L6890] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7754] RET, EXPR vub300_init() [L7754] ldv_retval_3 = vub300_init() [L7755] COND TRUE ldv_retval_3 == 0 [L7756] ldv_state_variable_0 = 3 [L7757] ldv_state_variable_8 = 1 [L7758] CALL ldv_initialize_mmc_host_ops_8() [L7193] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={-55340232221128654849:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={-55340232221128654849:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] tmp = ldv_init_zalloc(2624UL) [L7196] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7758] RET ldv_initialize_mmc_host_ops_8() [L7761] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, tmp___3=2, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7614] COND TRUE ldv_state_variable_7 != 0 [L7615] tmp___4 = __VERIFIER_nondet_int() [L7617] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7618] COND TRUE ldv_state_variable_7 == 1 [L7619] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6430] struct vub300_mmc_host *vub300 ; [L6431] struct usb_host_interface *iface_desc ; [L6432] struct usb_device *udev ; [L6433] struct usb_device *tmp ; [L6434] struct usb_device *tmp___0 ; [L6435] int i ; [L6436] int retval ; [L6437] struct urb *command_out_urb ; [L6438] struct urb *command_res_urb ; [L6439] struct mmc_host *mmc ; [L6440] char manufacturer[48U] ; [L6441] char product[32U] ; [L6442] char serial_number[32U] ; [L6443] void *tmp___1 ; [L6444] struct lock_class_key __key ; [L6445] struct lock_class_key __key___0 ; [L6446] int tmp___2 ; [L6447] struct usb_endpoint_descriptor *endpoint ; [L6448] int tmp___4 ; [L6449] char *tmp___5 ; [L6450] int tmp___6 ; [L6451] int tmp___7 ; [L6452] int tmp___8 ; [L6453] unsigned int tmp___9 ; [L6454] unsigned int tmp___10 ; [L6455] unsigned int tmp___11 ; [L6456] struct lock_class_key __key___1 ; [L6457] atomic_long_t __constr_expr_0 ; [L6458] struct lock_class_key __key___2 ; [L6459] atomic_long_t __constr_expr_1 ; [L6460] struct lock_class_key __key___3 ; [L6461] atomic_long_t __constr_expr_2 ; [L6462] int tmp___12 ; [L6463] int tmp___13 ; [L6465] CALL, EXPR interface_to_usbdev(interface) [L7824] struct usb_device *tmp ; [L7826] CALL, EXPR ldv_interface_to_usbdev() [L8302] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8307] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND FALSE !(tmp___0 != 0) [L4246] tmp = malloc(size) [L4247] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4248] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4248] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4249] return (p); VAL [={0:0}, ={0:0}, \old(size)=1678, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8307] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8307] result = ldv_malloc(sizeof(struct usb_device)) [L8308] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8312] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result={-18446744073709551615:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7826] RET, EXPR ldv_interface_to_usbdev() [L7826] tmp = ldv_interface_to_usbdev() [L7827] return (tmp); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={-36893488147419103233:0}, intf={-36893488147419103233:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6465] RET, EXPR interface_to_usbdev(interface) [L6465] tmp = interface_to_usbdev(interface) [L6466] CALL, EXPR ldv_usb_get_dev_43(tmp) [L8021] CALL ldv_get_dev(ldv_func_arg1) [L8318] DEV_STATE = DEV_STATE + 1 [L8319] return (data); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, data={-18446744073709551615:0}, data={-18446744073709551615:0}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8021] RET ldv_get_dev(ldv_func_arg1) [L8022] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-18446744073709551615:0}, ldv_func_arg1={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6466] RET, EXPR ldv_usb_get_dev_43(tmp) [L6466] tmp___0 = ldv_usb_get_dev_43(tmp) [L6467] udev = tmp___0 [L6468] retval = -12 [L6469] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-36893488147419103233:0}, interface={-36893488147419103233:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=123, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6469-L6470] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=123, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={0:0}, arg2={106:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6469-L6470] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-36893488147419103233:0}, interface={-36893488147419103233:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=123, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=0, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6471] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-36893488147419103233:0}, interface={-36893488147419103233:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6471] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=125, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={0:0}, arg2={107:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6471] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-36893488147419103233:0}, interface={-36893488147419103233:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=0, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6472] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-36893488147419103233:0}, interface={-36893488147419103233:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=126, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6472-L6473] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=126, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={0:0}, arg2={113:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6472-L6473] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-36893488147419103233:0}, interface={-36893488147419103233:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=126, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=0, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6475] udev->descriptor.idVendor [L6475] udev->descriptor.idProduct [L6477] CALL, EXPR ldv_usb_alloc_urb_44(0, 208U) [L8027] ldv_func_ret_type___10 ldv_func_res ; [L8028] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8030] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8532] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND TRUE tmp___0 != 0 [L4244] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8532] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0=0, arg1=208, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8532] return ldv_malloc(sizeof(struct urb)); [L8030] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8030] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8031] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8032] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8211] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8032] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8033] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6477] RET, EXPR ldv_usb_alloc_urb_44(0, 208U) [L6477] command_out_urb = ldv_usb_alloc_urb_44(0, 208U) [L6478] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6479] retval = -12 [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, command_out_urb={0:0}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-36893488147419103233:0}, interface={-36893488147419103233:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, retval=-12, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7619] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7619] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7620] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, tmp___3=7, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7745] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7746] CALL vub300_exit() [L6904] CALL ldv_usb_deregister_60(& vub300_driver) [L8119] FCALL usb_deregister(arg) [L8120] ldv_state_variable_7 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg={86:0}, arg={86:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6904] RET ldv_usb_deregister_60(& vub300_driver) [L6905] CALL ldv_flush_workqueue_61(cmndworkqueue) [L8127] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8128] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8128] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6905] RET ldv_flush_workqueue_61(cmndworkqueue) [L6906] CALL ldv_flush_workqueue_62(pollworkqueue) [L8135] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8136] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8136] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6906] RET ldv_flush_workqueue_62(pollworkqueue) [L6907] CALL ldv_flush_workqueue_63(deadworkqueue) [L8143] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8144] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8144] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6907] RET ldv_flush_workqueue_63(deadworkqueue) [L6908] CALL ldv_destroy_workqueue_64(cmndworkqueue) [L8151] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8152] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8152] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6908] RET ldv_destroy_workqueue_64(cmndworkqueue) [L6909] CALL ldv_destroy_workqueue_65(pollworkqueue) [L8159] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8160] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8160] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6909] RET ldv_destroy_workqueue_65(pollworkqueue) [L6910] CALL ldv_destroy_workqueue_66(deadworkqueue) [L8167] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8168] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8168] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6910] RET ldv_destroy_workqueue_66(deadworkqueue) [L7746] RET vub300_exit() [L7747] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-36893488147419103231:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-92233720368547758081:0}, tmp___2={-36893488147419103231:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7788] CALL ldv_check_final_state() [L8380] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8384] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8385] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8176] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-36893488147419103233:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1587 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 258.9s, OverallIterations: 20, TraceHistogramMax: 8, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.4s, AutomataDifference: 228.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 78386 SdHoareTripleChecker+Valid, 210.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 74559 mSDsluCounter, 188395 SdHoareTripleChecker+Invalid, 188.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 144426 mSDsCounter, 54526 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 111645 IncrementalHoareTripleChecker+Invalid, 166171 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 54526 mSolverCounterUnsat, 43969 mSDtfsCounter, 111645 mSolverCounterSat, 0.8s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 3962 GetRequests, 3625 SyntacticMatches, 6 SemanticMatches, 331 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1409 ImplicationChecksByTransitivity, 4.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=24675occurred in iteration=8, InterpolantAutomatonStates: 235, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 12.4s AutomataMinimizationTime, 19 MinimizatonAttempts, 37674 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.4s SsaConstructionTime, 3.1s SatisfiabilityAnalysisTime, 10.0s InterpolantComputationTime, 6236 NumberOfCodeBlocks, 6236 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 6820 ConstructedInterpolants, 0 QuantifiedInterpolants, 13007 SizeOfPredicates, 13 NumberOfNonLiveVariables, 14609 ConjunctsInSsa, 89 ConjunctsInUnsatCore, 27 InterpolantComputations, 16 PerfectInterpolantSequences, 7112/7245 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 22:52:43,116 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-12-06 22:52:43,138 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 22:52:44,518 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 22:52:44,520 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 22:52:44,544 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 22:52:44,544 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 22:52:44,545 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 22:52:44,546 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 22:52:44,548 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 22:52:44,550 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 22:52:44,551 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 22:52:44,551 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 22:52:44,552 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 22:52:44,553 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 22:52:44,554 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 22:52:44,555 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 22:52:44,556 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 22:52:44,557 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 22:52:44,558 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 22:52:44,559 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 22:52:44,561 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 22:52:44,562 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 22:52:44,563 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 22:52:44,565 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 22:52:44,565 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 22:52:44,568 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 22:52:44,568 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 22:52:44,569 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 22:52:44,569 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 22:52:44,570 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 22:52:44,571 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 22:52:44,571 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 22:52:44,572 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 22:52:44,572 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 22:52:44,573 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 22:52:44,574 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 22:52:44,574 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 22:52:44,583 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 22:52:44,584 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 22:52:44,584 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 22:52:44,585 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 22:52:44,585 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 22:52:44,586 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-06 22:52:44,605 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 22:52:44,605 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 22:52:44,605 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 22:52:44,605 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 22:52:44,606 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 22:52:44,606 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 22:52:44,607 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 22:52:44,607 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 22:52:44,607 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 22:52:44,607 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 22:52:44,607 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 22:52:44,607 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 22:52:44,607 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 22:52:44,608 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 22:52:44,608 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-06 22:52:44,608 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-06 22:52:44,608 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-06 22:52:44,608 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 22:52:44,608 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 22:52:44,608 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 22:52:44,609 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 22:52:44,609 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 22:52:44,609 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 22:52:44,609 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:52:44,609 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 22:52:44,609 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 22:52:44,609 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 22:52:44,610 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-06 22:52:44,610 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-06 22:52:44,610 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 22:52:44,610 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 22:52:44,610 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 22:52:44,610 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 22:52:44,610 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-06 22:52:44,610 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 [2021-12-06 22:52:44,841 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 22:52:44,858 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 22:52:44,860 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 22:52:44,861 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 22:52:44,861 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 22:52:44,862 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:52:44,910 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data/80eb23c6c/862abde56e5e400abfbcac564507da97/FLAG65623f24a [2021-12-06 22:52:45,579 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 22:52:45,579 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:52:45,609 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data/80eb23c6c/862abde56e5e400abfbcac564507da97/FLAG65623f24a [2021-12-06 22:52:45,955 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/data/80eb23c6c/862abde56e5e400abfbcac564507da97 [2021-12-06 22:52:45,960 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 22:52:45,963 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 22:52:45,965 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 22:52:45,965 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 22:52:45,978 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 22:52:45,978 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:52:45" (1/1) ... [2021-12-06 22:52:45,979 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2ae82b23 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:45, skipping insertion in model container [2021-12-06 22:52:45,980 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:52:45" (1/1) ... [2021-12-06 22:52:45,985 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 22:52:46,053 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:52:47,376 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-12-06 22:52:47,408 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:52:47,429 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-06 22:52:47,470 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:52:47,709 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-12-06 22:52:47,716 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:52:47,728 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 22:52:48,001 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-12-06 22:52:48,017 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:52:48,086 INFO L208 MainTranslator]: Completed translation [2021-12-06 22:52:48,086 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48 WrapperNode [2021-12-06 22:52:48,086 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 22:52:48,087 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 22:52:48,087 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 22:52:48,087 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 22:52:48,092 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,142 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,249 INFO L137 Inliner]: procedures = 275, calls = 1808, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4401 [2021-12-06 22:52:48,250 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 22:52:48,250 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 22:52:48,250 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 22:52:48,250 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 22:52:48,257 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,258 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,275 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,276 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,357 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,375 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,393 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,411 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 22:52:48,412 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 22:52:48,412 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 22:52:48,412 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 22:52:48,413 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (1/1) ... [2021-12-06 22:52:48,419 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:52:48,430 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:52:48,443 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 22:52:48,446 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 22:52:48,476 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-06 22:52:48,476 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-12-06 22:52:48,476 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-12-06 22:52:48,476 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-06 22:52:48,476 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-06 22:52:48,476 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 22:52:48,476 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-06 22:52:48,476 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 22:52:48,477 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 22:52:48,477 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 22:52:48,477 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-06 22:52:48,477 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-06 22:52:48,477 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-12-06 22:52:48,477 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-12-06 22:52:48,477 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_11 [2021-12-06 22:52:48,477 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_11 [2021-12-06 22:52:48,477 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-12-06 22:52:48,478 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-12-06 22:52:48,478 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-12-06 22:52:48,478 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-12-06 22:52:48,478 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-06 22:52:48,478 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-06 22:52:48,478 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-12-06 22:52:48,478 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-12-06 22:52:48,478 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 22:52:48,478 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 22:52:48,478 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-06 22:52:48,478 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-06 22:52:48,479 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-12-06 22:52:48,479 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-12-06 22:52:48,479 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-12-06 22:52:48,479 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-12-06 22:52:48,479 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-12-06 22:52:48,479 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-12-06 22:52:48,479 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 22:52:48,479 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 22:52:48,479 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 22:52:48,480 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 22:52:48,480 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_49 [2021-12-06 22:52:48,480 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_49 [2021-12-06 22:52:48,480 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 22:52:48,480 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 22:52:48,480 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-12-06 22:52:48,480 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-12-06 22:52:48,480 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-12-06 22:52:48,480 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-12-06 22:52:48,480 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-12-06 22:52:48,481 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-12-06 22:52:48,481 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-12-06 22:52:48,481 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-12-06 22:52:48,481 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-12-06 22:52:48,481 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-12-06 22:52:48,481 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_26 [2021-12-06 22:52:48,481 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_26 [2021-12-06 22:52:48,481 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 22:52:48,481 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_28 [2021-12-06 22:52:48,481 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_28 [2021-12-06 22:52:48,482 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-06 22:52:48,482 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-06 22:52:48,482 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-12-06 22:52:48,482 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-12-06 22:52:48,482 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 22:52:48,482 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2021-12-06 22:52:48,482 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2021-12-06 22:52:48,482 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-12-06 22:52:48,482 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-12-06 22:52:48,482 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-12-06 22:52:48,482 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-12-06 22:52:48,483 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-12-06 22:52:48,483 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-12-06 22:52:48,483 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_14 [2021-12-06 22:52:48,483 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_14 [2021-12-06 22:52:48,483 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-12-06 22:52:48,483 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-12-06 22:52:48,483 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-12-06 22:52:48,483 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-06 22:52:48,483 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-06 22:52:48,483 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 22:52:48,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-06 22:52:48,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 22:52:48,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-06 22:52:48,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-06 22:52:48,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-06 22:52:48,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-06 22:52:48,484 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-12-06 22:52:48,484 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-12-06 22:52:48,484 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-06 22:52:48,484 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-06 22:52:48,485 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-12-06 22:52:48,485 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-12-06 22:52:48,485 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-12-06 22:52:48,485 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-12-06 22:52:48,485 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-12-06 22:52:48,485 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-12-06 22:52:48,485 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-12-06 22:52:48,485 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-12-06 22:52:48,485 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-12-06 22:52:48,486 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-12-06 22:52:48,486 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-12-06 22:52:48,486 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-12-06 22:52:48,486 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-12-06 22:52:48,486 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-12-06 22:52:48,486 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-12-06 22:52:48,486 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-12-06 22:52:48,486 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-12-06 22:52:48,486 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-12-06 22:52:48,487 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-12-06 22:52:48,487 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-12-06 22:52:48,487 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-12-06 22:52:48,487 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-12-06 22:52:48,487 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-12-06 22:52:48,487 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-12-06 22:52:48,487 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_6 [2021-12-06 22:52:48,487 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_6 [2021-12-06 22:52:48,487 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-06 22:52:48,488 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-06 22:52:48,488 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 22:52:48,488 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 22:52:48,488 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-06 22:52:48,488 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-06 22:52:48,488 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-12-06 22:52:48,488 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-12-06 22:52:48,488 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-06 22:52:48,488 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-06 22:52:48,489 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 22:52:48,489 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 22:52:48,489 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-12-06 22:52:48,489 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-12-06 22:52:48,489 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-12-06 22:52:48,489 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-12-06 22:52:48,489 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-06 22:52:48,489 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-12-06 22:52:48,489 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-12-06 22:52:48,489 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-06 22:52:48,490 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-06 22:52:48,490 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-12-06 22:52:48,490 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-12-06 22:52:48,490 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-06 22:52:48,490 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 22:52:48,490 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 22:52:48,490 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_31 [2021-12-06 22:52:48,490 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_31 [2021-12-06 22:52:48,490 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-12-06 22:52:48,490 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-12-06 22:52:48,490 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 22:52:48,491 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_6 [2021-12-06 22:52:48,491 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_6 [2021-12-06 22:52:48,491 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-12-06 22:52:48,491 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-12-06 22:52:48,491 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-12-06 22:52:48,491 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-12-06 22:52:48,491 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-12-06 22:52:48,491 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-12-06 22:52:48,491 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-12-06 22:52:48,491 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-12-06 22:52:48,492 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 22:52:48,492 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-12-06 22:52:48,492 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-12-06 22:52:48,492 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_6 [2021-12-06 22:52:48,492 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_6 [2021-12-06 22:52:48,492 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_8 [2021-12-06 22:52:48,492 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_8 [2021-12-06 22:52:48,492 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-06 22:52:48,492 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-06 22:52:48,492 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 22:52:48,493 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-12-06 22:52:48,493 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-12-06 22:52:48,493 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-06 22:52:48,493 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-12-06 22:52:48,493 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-12-06 22:52:48,493 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-06 22:52:48,493 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 22:52:48,493 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 22:52:48,493 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-06 22:52:48,493 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-12-06 22:52:48,494 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-12-06 22:52:48,494 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-12-06 22:52:48,494 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-12-06 22:52:48,494 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-12-06 22:52:48,494 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-12-06 22:52:48,494 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-12-06 22:52:48,494 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-12-06 22:52:48,494 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-12-06 22:52:48,494 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-12-06 22:52:48,494 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-12-06 22:52:48,495 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-12-06 22:52:48,495 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-12-06 22:52:48,495 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-12-06 22:52:48,495 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-12-06 22:52:48,495 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-12-06 22:52:48,495 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-12-06 22:52:48,495 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-12-06 22:52:48,495 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-12-06 22:52:48,495 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-12-06 22:52:48,495 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-12-06 22:52:48,495 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-12-06 22:52:48,496 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-12-06 22:52:48,496 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-12-06 22:52:48,496 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-12-06 22:52:48,496 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-12-06 22:52:48,496 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~C_ULONG~TO~VOID [2021-12-06 22:52:48,496 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~C_ULONG~TO~VOID [2021-12-06 22:52:48,496 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_46 [2021-12-06 22:52:48,496 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_46 [2021-12-06 22:52:48,496 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-06 22:52:48,496 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-06 22:52:48,497 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-06 22:52:48,497 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-12-06 22:52:48,497 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-12-06 22:52:48,497 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-12-06 22:52:48,497 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-12-06 22:52:48,497 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-06 22:52:48,497 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-06 22:52:48,497 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-12-06 22:52:48,497 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-12-06 22:52:48,497 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-12-06 22:52:48,498 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-12-06 22:52:48,498 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-12-06 22:52:48,498 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 22:52:48,498 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 22:52:48,967 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 22:52:48,971 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 22:52:57,391 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 22:53:34,823 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 22:53:34,844 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 22:53:34,845 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-06 22:53:34,848 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:53:34 BoogieIcfgContainer [2021-12-06 22:53:34,848 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 22:53:34,850 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 22:53:34,850 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 22:53:34,852 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 22:53:34,852 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 10:52:45" (1/3) ... [2021-12-06 22:53:34,852 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@45b7ad8f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:53:34, skipping insertion in model container [2021-12-06 22:53:34,853 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:52:48" (2/3) ... [2021-12-06 22:53:34,853 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@45b7ad8f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:53:34, skipping insertion in model container [2021-12-06 22:53:34,853 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:53:34" (3/3) ... [2021-12-06 22:53:34,854 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:53:34,857 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 22:53:34,858 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 22:53:34,900 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 22:53:34,904 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 22:53:34,905 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 22:53:34,942 INFO L276 IsEmpty]: Start isEmpty. Operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) [2021-12-06 22:53:34,956 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:53:34,956 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:53:34,957 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:53:34,957 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:53:34,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:53:34,961 INFO L85 PathProgramCache]: Analyzing trace with hash -1113157247, now seen corresponding path program 1 times [2021-12-06 22:53:34,974 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:53:34,974 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [658194586] [2021-12-06 22:53:34,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:53:34,975 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:53:34,975 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:53:34,976 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:53:34,977 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-06 22:53:35,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:53:35,504 INFO L263 TraceCheckSpWp]: Trace formula consists of 926 conjuncts, 1 conjunts are in the unsatisfiable core [2021-12-06 22:53:35,510 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:53:36,036 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-12-06 22:53:36,037 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:53:36,037 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:53:36,037 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [658194586] [2021-12-06 22:53:36,038 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [658194586] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:53:36,038 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:53:36,038 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:53:36,040 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [473733473] [2021-12-06 22:53:36,040 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:53:36,044 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 22:53:36,044 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:53:36,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 22:53:36,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:53:36,075 INFO L87 Difference]: Start difference. First operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) Second operand has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 22:53:36,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:53:36,185 INFO L93 Difference]: Finished difference Result 3167 states and 4665 transitions. [2021-12-06 22:53:36,185 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 22:53:36,186 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 114 [2021-12-06 22:53:36,187 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:53:36,212 INFO L225 Difference]: With dead ends: 3167 [2021-12-06 22:53:36,213 INFO L226 Difference]: Without dead ends: 1570 [2021-12-06 22:53:36,225 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 113 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:53:36,227 INFO L933 BasicCegarLoop]: 2298 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 2298 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:53:36,228 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 2298 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:53:36,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2021-12-06 22:53:36,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 1570. [2021-12-06 22:53:36,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1570 states, 1102 states have (on average 1.3874773139745917) internal successors, (1529), 1157 states have internal predecessors, (1529), 375 states have call successors, (375), 93 states have call predecessors, (375), 92 states have return successors, (371), 345 states have call predecessors, (371), 371 states have call successors, (371) [2021-12-06 22:53:36,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1570 states to 1570 states and 2275 transitions. [2021-12-06 22:53:36,343 INFO L78 Accepts]: Start accepts. Automaton has 1570 states and 2275 transitions. Word has length 114 [2021-12-06 22:53:36,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:53:36,343 INFO L470 AbstractCegarLoop]: Abstraction has 1570 states and 2275 transitions. [2021-12-06 22:53:36,344 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 22:53:36,344 INFO L276 IsEmpty]: Start isEmpty. Operand 1570 states and 2275 transitions. [2021-12-06 22:53:36,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:53:36,348 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:53:36,348 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:53:36,364 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-06 22:53:36,549 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:53:36,549 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:53:36,550 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:53:36,550 INFO L85 PathProgramCache]: Analyzing trace with hash 981574537, now seen corresponding path program 1 times [2021-12-06 22:53:36,551 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:53:36,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [405187559] [2021-12-06 22:53:36,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:53:36,552 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:53:36,552 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:53:36,553 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:53:36,554 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-06 22:53:37,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:53:37,043 INFO L263 TraceCheckSpWp]: Trace formula consists of 926 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-06 22:53:37,047 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:53:37,645 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2021-12-06 22:53:37,645 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:53:37,645 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:53:37,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [405187559] [2021-12-06 22:53:37,646 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [405187559] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:53:37,646 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:53:37,646 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:53:37,646 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [379098895] [2021-12-06 22:53:37,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:53:37,647 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:53:37,648 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:53:37,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:53:37,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:53:37,648 INFO L87 Difference]: Start difference. First operand 1570 states and 2275 transitions. Second operand has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-12-06 22:53:38,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:53:38,397 INFO L93 Difference]: Finished difference Result 3134 states and 4545 transitions. [2021-12-06 22:53:38,398 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 22:53:38,398 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 114 [2021-12-06 22:53:38,399 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:53:38,409 INFO L225 Difference]: With dead ends: 3134 [2021-12-06 22:53:38,410 INFO L226 Difference]: Without dead ends: 1573 [2021-12-06 22:53:38,415 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 109 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:53:38,416 INFO L933 BasicCegarLoop]: 2266 mSDtfsCounter, 6 mSDsluCounter, 9050 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11316 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-06 22:53:38,417 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11316 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-06 22:53:38,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1573 states. [2021-12-06 22:53:38,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1573 to 1573. [2021-12-06 22:53:38,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1573 states, 1104 states have (on average 1.3876811594202898) internal successors, (1532), 1160 states have internal predecessors, (1532), 375 states have call successors, (375), 93 states have call predecessors, (375), 93 states have return successors, (375), 345 states have call predecessors, (375), 371 states have call successors, (375) [2021-12-06 22:53:38,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1573 states to 1573 states and 2282 transitions. [2021-12-06 22:53:38,477 INFO L78 Accepts]: Start accepts. Automaton has 1573 states and 2282 transitions. Word has length 114 [2021-12-06 22:53:38,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:53:38,478 INFO L470 AbstractCegarLoop]: Abstraction has 1573 states and 2282 transitions. [2021-12-06 22:53:38,478 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-12-06 22:53:38,478 INFO L276 IsEmpty]: Start isEmpty. Operand 1573 states and 2282 transitions. [2021-12-06 22:53:38,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-12-06 22:53:38,481 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:53:38,481 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:53:38,502 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-06 22:53:38,682 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:53:38,682 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:53:38,682 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:53:38,683 INFO L85 PathProgramCache]: Analyzing trace with hash -1593780675, now seen corresponding path program 1 times [2021-12-06 22:53:38,683 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:53:38,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [169276307] [2021-12-06 22:53:38,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:53:38,684 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:53:38,684 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:53:38,684 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:53:38,685 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-06 22:53:39,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:53:39,178 INFO L263 TraceCheckSpWp]: Trace formula consists of 948 conjuncts, 6 conjunts are in the unsatisfiable core [2021-12-06 22:53:39,182 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:53:39,870 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2021-12-06 22:53:39,870 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:53:41,417 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-06 22:53:41,417 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:53:41,417 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [169276307] [2021-12-06 22:53:41,417 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [169276307] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:53:41,417 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 22:53:41,417 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 11 [2021-12-06 22:53:41,417 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1609343825] [2021-12-06 22:53:41,418 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 22:53:41,418 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-12-06 22:53:41,418 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:53:41,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-12-06 22:53:41,419 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2021-12-06 22:53:41,419 INFO L87 Difference]: Start difference. First operand 1573 states and 2282 transitions. Second operand has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:53:42,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:53:42,948 INFO L93 Difference]: Finished difference Result 3140 states and 4559 transitions. [2021-12-06 22:53:42,950 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 22:53:42,950 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 116 [2021-12-06 22:53:42,951 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:53:42,963 INFO L225 Difference]: With dead ends: 3140 [2021-12-06 22:53:42,963 INFO L226 Difference]: Without dead ends: 1576 [2021-12-06 22:53:42,969 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 221 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=46, Invalid=136, Unknown=0, NotChecked=0, Total=182 [2021-12-06 22:53:42,970 INFO L933 BasicCegarLoop]: 2267 mSDtfsCounter, 11 mSDsluCounter, 15839 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 18106 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:53:42,971 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [13 Valid, 18106 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-12-06 22:53:42,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1576 states. [2021-12-06 22:53:43,012 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1576 to 1574. [2021-12-06 22:53:43,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1574 states, 1105 states have (on average 1.388235294117647) internal successors, (1534), 1161 states have internal predecessors, (1534), 375 states have call successors, (375), 93 states have call predecessors, (375), 93 states have return successors, (375), 345 states have call predecessors, (375), 371 states have call successors, (375) [2021-12-06 22:53:43,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1574 states to 1574 states and 2284 transitions. [2021-12-06 22:53:43,024 INFO L78 Accepts]: Start accepts. Automaton has 1574 states and 2284 transitions. Word has length 116 [2021-12-06 22:53:43,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:53:43,025 INFO L470 AbstractCegarLoop]: Abstraction has 1574 states and 2284 transitions. [2021-12-06 22:53:43,026 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:53:43,026 INFO L276 IsEmpty]: Start isEmpty. Operand 1574 states and 2284 transitions. [2021-12-06 22:53:43,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2021-12-06 22:53:43,029 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:53:43,029 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:53:43,044 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Ended with exit code 0 [2021-12-06 22:53:43,229 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:53:43,230 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:53:43,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:53:43,230 INFO L85 PathProgramCache]: Analyzing trace with hash 1401967625, now seen corresponding path program 2 times [2021-12-06 22:53:43,231 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:53:43,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1397669510] [2021-12-06 22:53:43,232 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 22:53:43,232 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:53:43,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:53:43,232 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:53:43,233 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-06 22:53:43,614 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 22:53:43,614 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:53:43,631 INFO L263 TraceCheckSpWp]: Trace formula consists of 747 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:53:43,635 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:53:45,203 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-12-06 22:53:45,204 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:53:45,204 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:53:45,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1397669510] [2021-12-06 22:53:45,204 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1397669510] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:53:45,204 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:53:45,204 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:53:45,204 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [283068944] [2021-12-06 22:53:45,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:53:45,205 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:53:45,205 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:53:45,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:53:45,206 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:53:45,206 INFO L87 Difference]: Start difference. First operand 1574 states and 2284 transitions. Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:53:45,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:53:45,414 INFO L93 Difference]: Finished difference Result 4669 states and 6925 transitions. [2021-12-06 22:53:45,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:53:45,414 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 118 [2021-12-06 22:53:45,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:53:45,444 INFO L225 Difference]: With dead ends: 4669 [2021-12-06 22:53:45,444 INFO L226 Difference]: Without dead ends: 3118 [2021-12-06 22:53:45,464 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 117 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:53:45,465 INFO L933 BasicCegarLoop]: 2892 mSDtfsCounter, 2205 mSDsluCounter, 2266 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2205 SdHoareTripleChecker+Valid, 5158 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:53:45,465 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2205 Valid, 5158 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:53:45,470 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3118 states. [2021-12-06 22:53:45,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3118 to 3112. [2021-12-06 22:53:45,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3112 states, 2188 states have (on average 1.3889396709323583) internal successors, (3039), 2296 states have internal predecessors, (3039), 739 states have call successors, (739), 184 states have call predecessors, (739), 184 states have return successors, (774), 683 states have call predecessors, (774), 735 states have call successors, (774) [2021-12-06 22:53:45,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3112 states to 3112 states and 4552 transitions. [2021-12-06 22:53:45,574 INFO L78 Accepts]: Start accepts. Automaton has 3112 states and 4552 transitions. Word has length 118 [2021-12-06 22:53:45,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:53:45,574 INFO L470 AbstractCegarLoop]: Abstraction has 3112 states and 4552 transitions. [2021-12-06 22:53:45,574 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:53:45,575 INFO L276 IsEmpty]: Start isEmpty. Operand 3112 states and 4552 transitions. [2021-12-06 22:53:45,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 120 [2021-12-06 22:53:45,577 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:53:45,577 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:53:45,595 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-12-06 22:53:45,777 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:53:45,778 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:53:45,778 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:53:45,778 INFO L85 PathProgramCache]: Analyzing trace with hash 510774303, now seen corresponding path program 1 times [2021-12-06 22:53:45,779 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:53:45,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1084871320] [2021-12-06 22:53:45,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:53:45,779 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:53:45,779 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:53:45,780 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:53:45,781 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-06 22:53:46,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:53:46,291 INFO L263 TraceCheckSpWp]: Trace formula consists of 971 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-06 22:53:46,294 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:53:47,066 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-06 22:53:47,066 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:53:49,105 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2021-12-06 22:53:49,105 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:53:49,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1084871320] [2021-12-06 22:53:49,105 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1084871320] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:53:49,105 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 22:53:49,106 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 13 [2021-12-06 22:53:49,106 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210632006] [2021-12-06 22:53:49,106 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 22:53:49,106 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 22:53:49,106 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:53:49,106 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 22:53:49,107 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2021-12-06 22:53:49,107 INFO L87 Difference]: Start difference. First operand 3112 states and 4552 transitions. Second operand has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:53:51,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:53:51,023 INFO L93 Difference]: Finished difference Result 6229 states and 9125 transitions. [2021-12-06 22:53:51,025 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 22:53:51,025 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 119 [2021-12-06 22:53:51,025 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:53:51,057 INFO L225 Difference]: With dead ends: 6229 [2021-12-06 22:53:51,057 INFO L226 Difference]: Without dead ends: 3126 [2021-12-06 22:53:51,080 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 225 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2021-12-06 22:53:51,080 INFO L933 BasicCegarLoop]: 2268 mSDtfsCounter, 19 mSDsluCounter, 13581 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 15849 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2021-12-06 22:53:51,081 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 15849 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2021-12-06 22:53:51,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3126 states. [2021-12-06 22:53:51,166 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3126 to 3113. [2021-12-06 22:53:51,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3113 states, 2189 states have (on average 1.3892188213796255) internal successors, (3041), 2297 states have internal predecessors, (3041), 739 states have call successors, (739), 184 states have call predecessors, (739), 184 states have return successors, (774), 683 states have call predecessors, (774), 735 states have call successors, (774) [2021-12-06 22:53:51,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3113 states to 3113 states and 4554 transitions. [2021-12-06 22:53:51,183 INFO L78 Accepts]: Start accepts. Automaton has 3113 states and 4554 transitions. Word has length 119 [2021-12-06 22:53:51,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:53:51,184 INFO L470 AbstractCegarLoop]: Abstraction has 3113 states and 4554 transitions. [2021-12-06 22:53:51,184 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:53:51,184 INFO L276 IsEmpty]: Start isEmpty. Operand 3113 states and 4554 transitions. [2021-12-06 22:53:51,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-12-06 22:53:51,186 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:53:51,186 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:53:51,207 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Ended with exit code 0 [2021-12-06 22:53:51,387 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:53:51,387 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:53:51,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:53:51,388 INFO L85 PathProgramCache]: Analyzing trace with hash -639996693, now seen corresponding path program 2 times [2021-12-06 22:53:51,389 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:53:51,389 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1763538316] [2021-12-06 22:53:51,389 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 22:53:51,389 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:53:51,389 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:53:51,390 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:53:51,391 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-06 22:53:51,777 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 22:53:51,778 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:53:51,794 INFO L263 TraceCheckSpWp]: Trace formula consists of 748 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:53:51,796 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:53:53,385 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-12-06 22:53:53,386 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:53:53,386 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:53:53,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1763538316] [2021-12-06 22:53:53,386 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1763538316] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:53:53,386 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:53:53,386 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:53:53,386 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1618087223] [2021-12-06 22:53:53,387 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:53:53,387 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:53:53,387 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:53:53,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:53:53,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:53:53,388 INFO L87 Difference]: Start difference. First operand 3113 states and 4554 transitions. Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:53:53,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:53:53,553 INFO L93 Difference]: Finished difference Result 8928 states and 13306 transitions. [2021-12-06 22:53:53,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:53:53,554 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 121 [2021-12-06 22:53:53,554 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:53:53,585 INFO L225 Difference]: With dead ends: 8928 [2021-12-06 22:53:53,585 INFO L226 Difference]: Without dead ends: 5838 [2021-12-06 22:53:53,609 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:53:53,609 INFO L933 BasicCegarLoop]: 2602 mSDtfsCounter, 1949 mSDsluCounter, 2236 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1949 SdHoareTripleChecker+Valid, 4838 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:53:53,609 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1949 Valid, 4838 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:53:53,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5838 states. [2021-12-06 22:53:53,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5838 to 5826. [2021-12-06 22:53:53,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5826 states, 4098 states have (on average 1.395070766227428) internal successors, (5717), 4308 states have internal predecessors, (5717), 1377 states have call successors, (1377), 350 states have call predecessors, (1377), 350 states have return successors, (1445), 1269 states have call predecessors, (1445), 1373 states have call successors, (1445) [2021-12-06 22:53:53,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5826 states to 5826 states and 8539 transitions. [2021-12-06 22:53:53,794 INFO L78 Accepts]: Start accepts. Automaton has 5826 states and 8539 transitions. Word has length 121 [2021-12-06 22:53:53,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:53:53,795 INFO L470 AbstractCegarLoop]: Abstraction has 5826 states and 8539 transitions. [2021-12-06 22:53:53,795 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:53:53,795 INFO L276 IsEmpty]: Start isEmpty. Operand 5826 states and 8539 transitions. [2021-12-06 22:53:53,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2021-12-06 22:53:53,797 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:53:53,797 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:53:53,815 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-12-06 22:53:53,998 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:53:53,998 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:53:53,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:53:53,999 INFO L85 PathProgramCache]: Analyzing trace with hash 1634394752, now seen corresponding path program 1 times [2021-12-06 22:53:54,000 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:53:54,000 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1303880803] [2021-12-06 22:53:54,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:53:54,001 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:53:54,001 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:53:54,002 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:53:54,017 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-12-06 22:53:54,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:53:54,520 INFO L263 TraceCheckSpWp]: Trace formula consists of 994 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 22:53:54,524 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:53:55,437 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 24 proven. 6 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2021-12-06 22:53:55,438 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:53:57,996 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2021-12-06 22:53:57,996 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:53:57,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1303880803] [2021-12-06 22:53:57,996 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1303880803] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:53:57,996 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 22:53:57,997 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2021-12-06 22:53:57,997 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065542882] [2021-12-06 22:53:57,997 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 22:53:57,997 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-06 22:53:57,997 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:53:57,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-06 22:53:57,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=165, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:53:57,998 INFO L87 Difference]: Start difference. First operand 5826 states and 8539 transitions. Second operand has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:54:00,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:00,323 INFO L93 Difference]: Finished difference Result 11686 states and 17167 transitions. [2021-12-06 22:54:00,324 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-06 22:54:00,325 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 122 [2021-12-06 22:54:00,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:00,357 INFO L225 Difference]: With dead ends: 11686 [2021-12-06 22:54:00,357 INFO L226 Difference]: Without dead ends: 5869 [2021-12-06 22:54:00,376 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 247 GetRequests, 229 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=83, Invalid=297, Unknown=0, NotChecked=0, Total=380 [2021-12-06 22:54:00,376 INFO L933 BasicCegarLoop]: 2269 mSDtfsCounter, 36 mSDsluCounter, 11319 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 13588 SdHoareTripleChecker+Invalid, 198 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:00,376 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 13588 Invalid, 198 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2021-12-06 22:54:00,393 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5869 states. [2021-12-06 22:54:00,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5869 to 5827. [2021-12-06 22:54:00,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5827 states, 4099 states have (on average 1.3952183459380336) internal successors, (5719), 4309 states have internal predecessors, (5719), 1377 states have call successors, (1377), 350 states have call predecessors, (1377), 350 states have return successors, (1445), 1269 states have call predecessors, (1445), 1373 states have call successors, (1445) [2021-12-06 22:54:00,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5827 states to 5827 states and 8541 transitions. [2021-12-06 22:54:00,606 INFO L78 Accepts]: Start accepts. Automaton has 5827 states and 8541 transitions. Word has length 122 [2021-12-06 22:54:00,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:00,607 INFO L470 AbstractCegarLoop]: Abstraction has 5827 states and 8541 transitions. [2021-12-06 22:54:00,607 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:54:00,607 INFO L276 IsEmpty]: Start isEmpty. Operand 5827 states and 8541 transitions. [2021-12-06 22:54:00,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-12-06 22:54:00,610 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:00,610 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:00,631 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Ended with exit code 0 [2021-12-06 22:54:00,810 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:00,811 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:00,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:00,811 INFO L85 PathProgramCache]: Analyzing trace with hash -1590994356, now seen corresponding path program 2 times [2021-12-06 22:54:00,812 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:00,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1974104787] [2021-12-06 22:54:00,812 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 22:54:00,812 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:00,812 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:00,813 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:00,814 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-12-06 22:54:01,208 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 22:54:01,209 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:54:01,225 INFO L263 TraceCheckSpWp]: Trace formula consists of 749 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:54:01,227 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:02,934 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-06 22:54:02,934 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:02,934 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:02,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1974104787] [2021-12-06 22:54:02,935 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1974104787] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:02,935 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:02,935 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:54:02,935 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [421555550] [2021-12-06 22:54:02,935 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:02,936 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:54:02,936 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:02,936 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:54:02,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:02,937 INFO L87 Difference]: Start difference. First operand 5827 states and 8541 transitions. Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:54:03,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:03,029 INFO L93 Difference]: Finished difference Result 5829 states and 8542 transitions. [2021-12-06 22:54:03,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:54:03,029 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 124 [2021-12-06 22:54:03,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:03,055 INFO L225 Difference]: With dead ends: 5829 [2021-12-06 22:54:03,055 INFO L226 Difference]: Without dead ends: 5826 [2021-12-06 22:54:03,057 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 122 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:03,057 INFO L933 BasicCegarLoop]: 2272 mSDtfsCounter, 2206 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2206 SdHoareTripleChecker+Valid, 2272 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:03,058 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2206 Valid, 2272 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:54:03,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5826 states. [2021-12-06 22:54:03,196 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5826 to 5826. [2021-12-06 22:54:03,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5826 states, 4099 states have (on average 1.3949743839960966) internal successors, (5718), 4308 states have internal predecessors, (5718), 1376 states have call successors, (1376), 350 states have call predecessors, (1376), 350 states have return successors, (1445), 1269 states have call predecessors, (1445), 1373 states have call successors, (1445) [2021-12-06 22:54:03,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5826 states to 5826 states and 8539 transitions. [2021-12-06 22:54:03,228 INFO L78 Accepts]: Start accepts. Automaton has 5826 states and 8539 transitions. Word has length 124 [2021-12-06 22:54:03,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:03,228 INFO L470 AbstractCegarLoop]: Abstraction has 5826 states and 8539 transitions. [2021-12-06 22:54:03,228 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:54:03,229 INFO L276 IsEmpty]: Start isEmpty. Operand 5826 states and 8539 transitions. [2021-12-06 22:54:03,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2021-12-06 22:54:03,231 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:03,231 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:03,249 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2021-12-06 22:54:03,432 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:03,432 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:03,432 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:03,433 INFO L85 PathProgramCache]: Analyzing trace with hash -2076724158, now seen corresponding path program 1 times [2021-12-06 22:54:03,433 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:03,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1072164392] [2021-12-06 22:54:03,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:03,434 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:03,434 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:03,434 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:03,435 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-12-06 22:54:03,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:03,975 INFO L263 TraceCheckSpWp]: Trace formula consists of 1017 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:54:03,978 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:05,685 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-06 22:54:05,685 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:05,685 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:05,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1072164392] [2021-12-06 22:54:05,685 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1072164392] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:05,685 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:05,686 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:54:05,686 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [236899989] [2021-12-06 22:54:05,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:05,686 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:54:05,686 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:05,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:54:05,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:05,687 INFO L87 Difference]: Start difference. First operand 5826 states and 8539 transitions. Second operand has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 2 states have internal predecessors, (52), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:54:05,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:05,788 INFO L93 Difference]: Finished difference Result 5828 states and 8540 transitions. [2021-12-06 22:54:05,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:54:05,788 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 2 states have internal predecessors, (52), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 125 [2021-12-06 22:54:05,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:05,806 INFO L225 Difference]: With dead ends: 5828 [2021-12-06 22:54:05,807 INFO L226 Difference]: Without dead ends: 5796 [2021-12-06 22:54:05,808 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:05,809 INFO L933 BasicCegarLoop]: 2271 mSDtfsCounter, 2203 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2203 SdHoareTripleChecker+Valid, 2271 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:05,809 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2203 Valid, 2271 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:54:05,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5796 states. [2021-12-06 22:54:05,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5796 to 5796. [2021-12-06 22:54:05,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5796 states, 4083 states have (on average 1.3955424932647562) internal successors, (5698), 4291 states have internal predecessors, (5698), 1363 states have call successors, (1363), 349 states have call predecessors, (1363), 349 states have return successors, (1433), 1257 states have call predecessors, (1433), 1361 states have call successors, (1433) [2021-12-06 22:54:05,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5796 states to 5796 states and 8494 transitions. [2021-12-06 22:54:05,991 INFO L78 Accepts]: Start accepts. Automaton has 5796 states and 8494 transitions. Word has length 125 [2021-12-06 22:54:05,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:05,991 INFO L470 AbstractCegarLoop]: Abstraction has 5796 states and 8494 transitions. [2021-12-06 22:54:05,992 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 2 states have internal predecessors, (52), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:54:05,992 INFO L276 IsEmpty]: Start isEmpty. Operand 5796 states and 8494 transitions. [2021-12-06 22:54:06,001 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 178 [2021-12-06 22:54:06,001 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:06,001 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:06,016 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Ended with exit code 0 [2021-12-06 22:54:06,202 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:06,202 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:06,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:06,203 INFO L85 PathProgramCache]: Analyzing trace with hash -104625019, now seen corresponding path program 1 times [2021-12-06 22:54:06,204 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:06,204 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1194459379] [2021-12-06 22:54:06,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:06,204 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:06,204 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:06,205 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:06,205 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-12-06 22:54:06,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:06,928 INFO L263 TraceCheckSpWp]: Trace formula consists of 1324 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:54:06,931 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:07,582 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2021-12-06 22:54:07,582 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:07,582 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:07,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1194459379] [2021-12-06 22:54:07,583 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1194459379] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:07,583 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:07,583 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:54:07,583 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [283779748] [2021-12-06 22:54:07,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:07,584 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:54:07,584 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:07,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:54:07,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:07,584 INFO L87 Difference]: Start difference. First operand 5796 states and 8494 transitions. Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 22:54:08,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:08,173 INFO L93 Difference]: Finished difference Result 16733 states and 24520 transitions. [2021-12-06 22:54:08,174 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:54:08,174 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 177 [2021-12-06 22:54:08,174 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:08,207 INFO L225 Difference]: With dead ends: 16733 [2021-12-06 22:54:08,207 INFO L226 Difference]: Without dead ends: 10960 [2021-12-06 22:54:08,222 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 175 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:08,223 INFO L933 BasicCegarLoop]: 2693 mSDtfsCounter, 1929 mSDsluCounter, 2184 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1929 SdHoareTripleChecker+Valid, 4877 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:08,223 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1929 Valid, 4877 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 22:54:08,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10960 states. [2021-12-06 22:54:08,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10960 to 10936. [2021-12-06 22:54:08,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10936 states, 7699 states have (on average 1.3983634238212754) internal successors, (10766), 8111 states have internal predecessors, (10766), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 677 states have return successors, (2695), 2349 states have call predecessors, (2695), 2557 states have call successors, (2695) [2021-12-06 22:54:08,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10936 states to 10936 states and 16020 transitions. [2021-12-06 22:54:08,574 INFO L78 Accepts]: Start accepts. Automaton has 10936 states and 16020 transitions. Word has length 177 [2021-12-06 22:54:08,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:08,575 INFO L470 AbstractCegarLoop]: Abstraction has 10936 states and 16020 transitions. [2021-12-06 22:54:08,575 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-06 22:54:08,575 INFO L276 IsEmpty]: Start isEmpty. Operand 10936 states and 16020 transitions. [2021-12-06 22:54:08,616 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 217 [2021-12-06 22:54:08,617 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:08,617 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:08,636 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-12-06 22:54:08,817 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:08,818 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:08,818 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:08,818 INFO L85 PathProgramCache]: Analyzing trace with hash 1302458743, now seen corresponding path program 1 times [2021-12-06 22:54:08,819 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:08,819 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1296398280] [2021-12-06 22:54:08,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:08,819 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:08,819 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:08,820 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:08,821 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-12-06 22:54:09,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:09,545 INFO L263 TraceCheckSpWp]: Trace formula consists of 1478 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 22:54:09,549 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:10,271 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 211 trivial. 0 not checked. [2021-12-06 22:54:10,271 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:10,272 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:10,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1296398280] [2021-12-06 22:54:10,272 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1296398280] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:10,272 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:10,272 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 22:54:10,272 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1192631032] [2021-12-06 22:54:10,273 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:10,273 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 22:54:10,273 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:10,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 22:54:10,274 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 22:54:10,274 INFO L87 Difference]: Start difference. First operand 10936 states and 16020 transitions. Second operand has 4 states, 4 states have (on average 26.0) internal successors, (104), 4 states have internal predecessors, (104), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 22:54:12,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:12,231 INFO L93 Difference]: Finished difference Result 24204 states and 35880 transitions. [2021-12-06 22:54:12,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 22:54:12,232 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 26.0) internal successors, (104), 4 states have internal predecessors, (104), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 216 [2021-12-06 22:54:12,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:12,283 INFO L225 Difference]: With dead ends: 24204 [2021-12-06 22:54:12,283 INFO L226 Difference]: Without dead ends: 13291 [2021-12-06 22:54:12,306 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 214 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:54:12,306 INFO L933 BasicCegarLoop]: 2600 mSDtfsCounter, 3048 mSDsluCounter, 2332 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 180 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3048 SdHoareTripleChecker+Valid, 4932 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 180 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:12,306 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3048 Valid, 4932 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [180 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2021-12-06 22:54:12,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13291 states. [2021-12-06 22:54:12,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13291 to 10950. [2021-12-06 22:54:12,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10950 states, 7713 states have (on average 1.3976403474653183) internal successors, (10780), 8125 states have internal predecessors, (10780), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 677 states have return successors, (2695), 2349 states have call predecessors, (2695), 2557 states have call successors, (2695) [2021-12-06 22:54:12,693 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10950 states to 10950 states and 16034 transitions. [2021-12-06 22:54:12,696 INFO L78 Accepts]: Start accepts. Automaton has 10950 states and 16034 transitions. Word has length 216 [2021-12-06 22:54:12,697 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:12,697 INFO L470 AbstractCegarLoop]: Abstraction has 10950 states and 16034 transitions. [2021-12-06 22:54:12,697 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 26.0) internal successors, (104), 4 states have internal predecessors, (104), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 22:54:12,697 INFO L276 IsEmpty]: Start isEmpty. Operand 10950 states and 16034 transitions. [2021-12-06 22:54:12,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 234 [2021-12-06 22:54:12,711 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:12,712 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:12,740 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Ended with exit code 0 [2021-12-06 22:54:12,912 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:12,913 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:12,913 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:12,913 INFO L85 PathProgramCache]: Analyzing trace with hash 1556541598, now seen corresponding path program 1 times [2021-12-06 22:54:12,915 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:12,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [694013779] [2021-12-06 22:54:12,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:12,915 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:12,916 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:12,917 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:12,918 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-12-06 22:54:14,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:14,100 INFO L263 TraceCheckSpWp]: Trace formula consists of 1528 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-06 22:54:14,104 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:14,980 INFO L134 CoverageAnalysis]: Checked inductivity of 301 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 276 trivial. 0 not checked. [2021-12-06 22:54:14,980 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:14,980 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:14,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [694013779] [2021-12-06 22:54:14,981 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [694013779] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:14,981 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:14,981 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:54:14,981 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [716514111] [2021-12-06 22:54:14,981 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:14,982 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:54:14,982 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:14,982 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:54:14,982 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:54:14,982 INFO L87 Difference]: Start difference. First operand 10950 states and 16034 transitions. Second operand has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 22:54:15,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:15,692 INFO L93 Difference]: Finished difference Result 16645 states and 24385 transitions. [2021-12-06 22:54:15,693 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 22:54:15,693 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 233 [2021-12-06 22:54:15,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:15,726 INFO L225 Difference]: With dead ends: 16645 [2021-12-06 22:54:15,726 INFO L226 Difference]: Without dead ends: 10986 [2021-12-06 22:54:15,739 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 229 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:54:15,739 INFO L933 BasicCegarLoop]: 2271 mSDtfsCounter, 1 mSDsluCounter, 6803 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 9074 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:15,740 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 9074 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 22:54:15,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10986 states. [2021-12-06 22:54:16,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10986 to 10966. [2021-12-06 22:54:16,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10966 states, 7725 states have (on average 1.3970226537216828) internal successors, (10792), 8137 states have internal predecessors, (10792), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 681 states have return successors, (2713), 2353 states have call predecessors, (2713), 2557 states have call successors, (2713) [2021-12-06 22:54:16,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10966 states to 10966 states and 16064 transitions. [2021-12-06 22:54:16,116 INFO L78 Accepts]: Start accepts. Automaton has 10966 states and 16064 transitions. Word has length 233 [2021-12-06 22:54:16,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:16,117 INFO L470 AbstractCegarLoop]: Abstraction has 10966 states and 16064 transitions. [2021-12-06 22:54:16,117 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 22:54:16,117 INFO L276 IsEmpty]: Start isEmpty. Operand 10966 states and 16064 transitions. [2021-12-06 22:54:16,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 240 [2021-12-06 22:54:16,136 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:16,136 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:16,156 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Ended with exit code 0 [2021-12-06 22:54:16,336 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:16,337 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:16,338 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:16,339 INFO L85 PathProgramCache]: Analyzing trace with hash -2024074724, now seen corresponding path program 1 times [2021-12-06 22:54:16,342 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:16,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [883254604] [2021-12-06 22:54:16,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:16,343 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:16,343 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:16,345 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:16,348 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-12-06 22:54:17,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:17,290 INFO L263 TraceCheckSpWp]: Trace formula consists of 1545 conjuncts, 17 conjunts are in the unsatisfiable core [2021-12-06 22:54:17,294 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:18,518 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-12-06 22:54:18,519 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:18,519 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:18,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [883254604] [2021-12-06 22:54:18,519 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [883254604] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:18,519 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:18,519 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 22:54:18,519 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [52169401] [2021-12-06 22:54:18,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:18,520 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 22:54:18,520 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:18,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 22:54:18,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:54:18,521 INFO L87 Difference]: Start difference. First operand 10966 states and 16064 transitions. Second operand has 9 states, 8 states have (on average 13.625) internal successors, (109), 7 states have internal predecessors, (109), 3 states have call successors, (20), 2 states have call predecessors, (20), 4 states have return successors, (19), 4 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 22:54:19,810 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:19,810 INFO L93 Difference]: Finished difference Result 15259 states and 22543 transitions. [2021-12-06 22:54:19,811 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-06 22:54:19,811 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 13.625) internal successors, (109), 7 states have internal predecessors, (109), 3 states have call successors, (20), 2 states have call predecessors, (20), 4 states have return successors, (19), 4 states have call predecessors, (19), 2 states have call successors, (19) Word has length 239 [2021-12-06 22:54:19,811 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:19,850 INFO L225 Difference]: With dead ends: 15259 [2021-12-06 22:54:19,850 INFO L226 Difference]: Without dead ends: 12423 [2021-12-06 22:54:19,872 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 239 GetRequests, 231 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-06 22:54:19,873 INFO L933 BasicCegarLoop]: 2956 mSDtfsCounter, 497 mSDsluCounter, 20087 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 620 SdHoareTripleChecker+Valid, 23043 SdHoareTripleChecker+Invalid, 97 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:19,873 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [620 Valid, 23043 Invalid, 97 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-06 22:54:19,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12423 states. [2021-12-06 22:54:20,185 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12423 to 10984. [2021-12-06 22:54:20,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10984 states, 7735 states have (on average 1.3965093729799611) internal successors, (10802), 8151 states have internal predecessors, (10802), 2561 states have call successors, (2561), 677 states have call predecessors, (2561), 687 states have return successors, (2727), 2357 states have call predecessors, (2727), 2559 states have call successors, (2727) [2021-12-06 22:54:20,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10984 states to 10984 states and 16090 transitions. [2021-12-06 22:54:20,224 INFO L78 Accepts]: Start accepts. Automaton has 10984 states and 16090 transitions. Word has length 239 [2021-12-06 22:54:20,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:20,224 INFO L470 AbstractCegarLoop]: Abstraction has 10984 states and 16090 transitions. [2021-12-06 22:54:20,224 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 13.625) internal successors, (109), 7 states have internal predecessors, (109), 3 states have call successors, (20), 2 states have call predecessors, (20), 4 states have return successors, (19), 4 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 22:54:20,224 INFO L276 IsEmpty]: Start isEmpty. Operand 10984 states and 16090 transitions. [2021-12-06 22:54:20,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 241 [2021-12-06 22:54:20,237 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:20,237 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:20,259 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-12-06 22:54:20,438 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:20,438 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:20,439 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:20,440 INFO L85 PathProgramCache]: Analyzing trace with hash 1952403498, now seen corresponding path program 1 times [2021-12-06 22:54:20,443 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:20,443 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [513386096] [2021-12-06 22:54:20,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:20,444 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:20,445 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:20,446 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:20,449 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-12-06 22:54:21,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:21,363 INFO L263 TraceCheckSpWp]: Trace formula consists of 1545 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 22:54:21,367 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:21,781 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 304 trivial. 0 not checked. [2021-12-06 22:54:21,781 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:21,781 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:21,781 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [513386096] [2021-12-06 22:54:21,782 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [513386096] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:21,782 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:21,782 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:54:21,782 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1574628188] [2021-12-06 22:54:21,782 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:21,783 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:54:21,783 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:21,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:54:21,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:54:21,784 INFO L87 Difference]: Start difference. First operand 10984 states and 16090 transitions. Second operand has 5 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-12-06 22:54:24,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:24,755 INFO L93 Difference]: Finished difference Result 22386 states and 32784 transitions. [2021-12-06 22:54:24,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:54:24,756 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) Word has length 240 [2021-12-06 22:54:24,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:24,819 INFO L225 Difference]: With dead ends: 22386 [2021-12-06 22:54:24,819 INFO L226 Difference]: Without dead ends: 16705 [2021-12-06 22:54:24,837 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 244 GetRequests, 238 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:54:24,838 INFO L933 BasicCegarLoop]: 4380 mSDtfsCounter, 2946 mSDsluCounter, 10139 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 275 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2967 SdHoareTripleChecker+Valid, 14519 SdHoareTripleChecker+Invalid, 440 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 275 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:24,838 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2967 Valid, 14519 Invalid, 440 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [275 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2021-12-06 22:54:24,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16705 states. [2021-12-06 22:54:25,241 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16705 to 11006. [2021-12-06 22:54:25,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11006 states, 7749 states have (on average 1.395793005549103) internal successors, (10816), 8165 states have internal predecessors, (10816), 2569 states have call successors, (2569), 677 states have call predecessors, (2569), 687 states have return successors, (2735), 2365 states have call predecessors, (2735), 2567 states have call successors, (2735) [2021-12-06 22:54:25,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11006 states to 11006 states and 16120 transitions. [2021-12-06 22:54:25,280 INFO L78 Accepts]: Start accepts. Automaton has 11006 states and 16120 transitions. Word has length 240 [2021-12-06 22:54:25,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:25,281 INFO L470 AbstractCegarLoop]: Abstraction has 11006 states and 16120 transitions. [2021-12-06 22:54:25,281 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-12-06 22:54:25,281 INFO L276 IsEmpty]: Start isEmpty. Operand 11006 states and 16120 transitions. [2021-12-06 22:54:25,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 241 [2021-12-06 22:54:25,294 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:25,294 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:25,314 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Ended with exit code 0 [2021-12-06 22:54:25,494 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:25,495 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:25,496 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:25,496 INFO L85 PathProgramCache]: Analyzing trace with hash 1818389992, now seen corresponding path program 1 times [2021-12-06 22:54:25,500 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:25,500 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2087400045] [2021-12-06 22:54:25,500 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:25,501 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:25,501 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:25,503 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:25,506 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-12-06 22:54:26,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:26,399 INFO L263 TraceCheckSpWp]: Trace formula consists of 1543 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:54:26,402 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:27,871 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 111 proven. 0 refuted. 0 times theorem prover too weak. 214 trivial. 0 not checked. [2021-12-06 22:54:27,871 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:27,871 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:27,871 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2087400045] [2021-12-06 22:54:27,871 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2087400045] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:27,871 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:27,871 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:54:27,872 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2085717975] [2021-12-06 22:54:27,872 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:27,872 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:54:27,872 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:27,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:54:27,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:27,873 INFO L87 Difference]: Start difference. First operand 11006 states and 16120 transitions. Second operand has 3 states, 3 states have (on average 39.333333333333336) internal successors, (118), 3 states have internal predecessors, (118), 3 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-06 22:54:28,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:28,668 INFO L93 Difference]: Finished difference Result 32518 states and 47656 transitions. [2021-12-06 22:54:28,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:54:28,669 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 39.333333333333336) internal successors, (118), 3 states have internal predecessors, (118), 3 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) Word has length 240 [2021-12-06 22:54:28,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:28,737 INFO L225 Difference]: With dead ends: 32518 [2021-12-06 22:54:28,738 INFO L226 Difference]: Without dead ends: 21535 [2021-12-06 22:54:28,766 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 239 GetRequests, 238 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:28,766 INFO L933 BasicCegarLoop]: 3969 mSDtfsCounter, 2114 mSDsluCounter, 2220 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2114 SdHoareTripleChecker+Valid, 6189 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:28,767 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2114 Valid, 6189 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:54:28,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21535 states. [2021-12-06 22:54:29,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21535 to 21529. [2021-12-06 22:54:29,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21529 states, 15185 states have (on average 1.3971682581494895) internal successors, (21216), 15995 states have internal predecessors, (21216), 4995 states have call successors, (4995), 1328 states have call predecessors, (4995), 1348 states have return successors, (5325), 4589 states have call predecessors, (5325), 4993 states have call successors, (5325) [2021-12-06 22:54:29,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21529 states to 21529 states and 31536 transitions. [2021-12-06 22:54:29,610 INFO L78 Accepts]: Start accepts. Automaton has 21529 states and 31536 transitions. Word has length 240 [2021-12-06 22:54:29,610 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:29,610 INFO L470 AbstractCegarLoop]: Abstraction has 21529 states and 31536 transitions. [2021-12-06 22:54:29,611 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 39.333333333333336) internal successors, (118), 3 states have internal predecessors, (118), 3 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-06 22:54:29,611 INFO L276 IsEmpty]: Start isEmpty. Operand 21529 states and 31536 transitions. [2021-12-06 22:54:29,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 267 [2021-12-06 22:54:29,637 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:29,637 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:29,659 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Ended with exit code 0 [2021-12-06 22:54:29,837 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:29,838 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:29,839 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:29,840 INFO L85 PathProgramCache]: Analyzing trace with hash -771994492, now seen corresponding path program 1 times [2021-12-06 22:54:29,843 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:29,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1951369148] [2021-12-06 22:54:29,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:29,843 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:29,843 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:29,844 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:29,845 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-12-06 22:54:30,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:30,682 INFO L263 TraceCheckSpWp]: Trace formula consists of 1628 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 22:54:30,686 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:31,731 INFO L134 CoverageAnalysis]: Checked inductivity of 282 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 240 trivial. 0 not checked. [2021-12-06 22:54:31,731 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:31,732 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:31,732 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1951369148] [2021-12-06 22:54:31,732 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1951369148] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:31,732 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:31,732 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:54:31,732 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [97583881] [2021-12-06 22:54:31,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:31,733 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:54:31,733 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:31,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:54:31,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:54:31,733 INFO L87 Difference]: Start difference. First operand 21529 states and 31536 transitions. Second operand has 5 states, 5 states have (on average 25.0) internal successors, (125), 5 states have internal predecessors, (125), 3 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) [2021-12-06 22:54:32,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:32,577 INFO L93 Difference]: Finished difference Result 35008 states and 51216 transitions. [2021-12-06 22:54:32,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 22:54:32,578 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 25.0) internal successors, (125), 5 states have internal predecessors, (125), 3 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) Word has length 266 [2021-12-06 22:54:32,579 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:32,617 INFO L225 Difference]: With dead ends: 35008 [2021-12-06 22:54:32,617 INFO L226 Difference]: Without dead ends: 13323 [2021-12-06 22:54:32,658 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 267 GetRequests, 262 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:54:32,658 INFO L933 BasicCegarLoop]: 2265 mSDtfsCounter, 15 mSDsluCounter, 6772 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 9037 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:32,658 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 9037 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 22:54:32,667 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13323 states. [2021-12-06 22:54:33,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13323 to 13313. [2021-12-06 22:54:33,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13313 states, 9378 states have (on average 1.3947536788227768) internal successors, (13080), 9881 states have internal predecessors, (13080), 3089 states have call successors, (3089), 834 states have call predecessors, (3089), 845 states have return successors, (3289), 2831 states have call predecessors, (3289), 3087 states have call successors, (3289) [2021-12-06 22:54:33,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13313 states to 13313 states and 19458 transitions. [2021-12-06 22:54:33,198 INFO L78 Accepts]: Start accepts. Automaton has 13313 states and 19458 transitions. Word has length 266 [2021-12-06 22:54:33,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:33,199 INFO L470 AbstractCegarLoop]: Abstraction has 13313 states and 19458 transitions. [2021-12-06 22:54:33,199 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 25.0) internal successors, (125), 5 states have internal predecessors, (125), 3 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) [2021-12-06 22:54:33,199 INFO L276 IsEmpty]: Start isEmpty. Operand 13313 states and 19458 transitions. [2021-12-06 22:54:33,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 290 [2021-12-06 22:54:33,226 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:33,226 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:33,247 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (17)] Ended with exit code 0 [2021-12-06 22:54:33,427 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:33,428 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:33,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:33,429 INFO L85 PathProgramCache]: Analyzing trace with hash 49200001, now seen corresponding path program 1 times [2021-12-06 22:54:33,434 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:33,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1111013014] [2021-12-06 22:54:33,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:33,435 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:33,435 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:33,438 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:33,440 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-12-06 22:54:34,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:34,484 INFO L263 TraceCheckSpWp]: Trace formula consists of 1778 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:54:34,488 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:35,906 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-06 22:54:35,906 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:35,907 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:35,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1111013014] [2021-12-06 22:54:35,907 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1111013014] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:35,907 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:35,907 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:54:35,907 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849183526] [2021-12-06 22:54:35,907 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:35,908 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:54:35,908 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:35,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:54:35,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:35,909 INFO L87 Difference]: Start difference. First operand 13313 states and 19458 transitions. Second operand has 3 states, 3 states have (on average 53.666666666666664) internal successors, (161), 3 states have internal predecessors, (161), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:54:36,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:36,410 INFO L93 Difference]: Finished difference Result 26573 states and 38842 transitions. [2021-12-06 22:54:36,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:54:36,411 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 53.666666666666664) internal successors, (161), 3 states have internal predecessors, (161), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 289 [2021-12-06 22:54:36,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:36,451 INFO L225 Difference]: With dead ends: 26573 [2021-12-06 22:54:36,451 INFO L226 Difference]: Without dead ends: 13293 [2021-12-06 22:54:36,479 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 287 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:36,480 INFO L933 BasicCegarLoop]: 2264 mSDtfsCounter, 2254 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2254 SdHoareTripleChecker+Valid, 2264 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:36,480 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2254 Valid, 2264 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:54:36,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13293 states. [2021-12-06 22:54:36,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13293 to 13293. [2021-12-06 22:54:36,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13293 states, 9368 states have (on average 1.3941076003415884) internal successors, (13060), 9871 states have internal predecessors, (13060), 3079 states have call successors, (3079), 834 states have call predecessors, (3079), 845 states have return successors, (3274), 2821 states have call predecessors, (3274), 3077 states have call successors, (3274) [2021-12-06 22:54:36,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13293 states to 13293 states and 19413 transitions. [2021-12-06 22:54:36,974 INFO L78 Accepts]: Start accepts. Automaton has 13293 states and 19413 transitions. Word has length 289 [2021-12-06 22:54:36,974 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:36,974 INFO L470 AbstractCegarLoop]: Abstraction has 13293 states and 19413 transitions. [2021-12-06 22:54:36,974 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 53.666666666666664) internal successors, (161), 3 states have internal predecessors, (161), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:54:36,974 INFO L276 IsEmpty]: Start isEmpty. Operand 13293 states and 19413 transitions. [2021-12-06 22:54:36,994 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 293 [2021-12-06 22:54:36,994 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:36,994 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:37,018 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (18)] Ended with exit code 0 [2021-12-06 22:54:37,195 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:37,196 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:37,196 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:37,197 INFO L85 PathProgramCache]: Analyzing trace with hash 1857137467, now seen corresponding path program 1 times [2021-12-06 22:54:37,201 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:37,201 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [771923839] [2021-12-06 22:54:37,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:37,201 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:37,201 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:37,202 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:37,202 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (19)] Waiting until timeout for monitored process [2021-12-06 22:54:38,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:38,124 INFO L263 TraceCheckSpWp]: Trace formula consists of 1784 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:54:38,128 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:39,651 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-06 22:54:39,651 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:39,652 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:39,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [771923839] [2021-12-06 22:54:39,652 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [771923839] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:39,652 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:39,652 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:54:39,652 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [357554550] [2021-12-06 22:54:39,652 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:39,653 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:54:39,653 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:39,653 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:54:39,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:39,654 INFO L87 Difference]: Start difference. First operand 13293 states and 19413 transitions. Second operand has 3 states, 3 states have (on average 54.666666666666664) internal successors, (164), 3 states have internal predecessors, (164), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:54:40,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:40,175 INFO L93 Difference]: Finished difference Result 26533 states and 38752 transitions. [2021-12-06 22:54:40,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:54:40,176 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 54.666666666666664) internal successors, (164), 3 states have internal predecessors, (164), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 292 [2021-12-06 22:54:40,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:40,218 INFO L225 Difference]: With dead ends: 26533 [2021-12-06 22:54:40,218 INFO L226 Difference]: Without dead ends: 13273 [2021-12-06 22:54:40,249 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 290 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:40,249 INFO L933 BasicCegarLoop]: 2260 mSDtfsCounter, 2247 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2247 SdHoareTripleChecker+Valid, 2260 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:40,249 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2247 Valid, 2260 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:54:40,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13273 states. [2021-12-06 22:54:40,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13273 to 13273. [2021-12-06 22:54:40,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13273 states, 9358 states have (on average 1.3934601410557812) internal successors, (13040), 9861 states have internal predecessors, (13040), 3069 states have call successors, (3069), 834 states have call predecessors, (3069), 845 states have return successors, (3259), 2811 states have call predecessors, (3259), 3067 states have call successors, (3259) [2021-12-06 22:54:40,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13273 states to 13273 states and 19368 transitions. [2021-12-06 22:54:40,884 INFO L78 Accepts]: Start accepts. Automaton has 13273 states and 19368 transitions. Word has length 292 [2021-12-06 22:54:40,885 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:40,885 INFO L470 AbstractCegarLoop]: Abstraction has 13273 states and 19368 transitions. [2021-12-06 22:54:40,885 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 54.666666666666664) internal successors, (164), 3 states have internal predecessors, (164), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:54:40,885 INFO L276 IsEmpty]: Start isEmpty. Operand 13273 states and 19368 transitions. [2021-12-06 22:54:40,906 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2021-12-06 22:54:40,906 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:40,906 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:40,930 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (19)] Ended with exit code 0 [2021-12-06 22:54:41,106 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:41,107 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:41,108 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:41,109 INFO L85 PathProgramCache]: Analyzing trace with hash -1183594878, now seen corresponding path program 1 times [2021-12-06 22:54:41,113 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:41,113 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1108975332] [2021-12-06 22:54:41,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:41,114 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:41,114 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:41,116 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:41,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (20)] Waiting until timeout for monitored process [2021-12-06 22:54:41,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:42,035 INFO L263 TraceCheckSpWp]: Trace formula consists of 1782 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:54:42,038 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:43,568 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-06 22:54:43,569 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:43,569 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:43,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1108975332] [2021-12-06 22:54:43,569 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1108975332] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:43,569 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:43,569 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:54:43,570 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [575427790] [2021-12-06 22:54:43,570 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:43,570 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:54:43,570 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:43,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:54:43,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:43,571 INFO L87 Difference]: Start difference. First operand 13273 states and 19368 transitions. Second operand has 3 states, 3 states have (on average 54.333333333333336) internal successors, (163), 3 states have internal predecessors, (163), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:54:44,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:44,115 INFO L93 Difference]: Finished difference Result 26493 states and 38662 transitions. [2021-12-06 22:54:44,115 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:54:44,116 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 54.333333333333336) internal successors, (163), 3 states have internal predecessors, (163), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 291 [2021-12-06 22:54:44,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:44,158 INFO L225 Difference]: With dead ends: 26493 [2021-12-06 22:54:44,158 INFO L226 Difference]: Without dead ends: 13253 [2021-12-06 22:54:44,188 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 290 GetRequests, 289 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:44,188 INFO L933 BasicCegarLoop]: 2256 mSDtfsCounter, 2244 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2244 SdHoareTripleChecker+Valid, 2256 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:44,189 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2244 Valid, 2256 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:54:44,198 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13253 states. [2021-12-06 22:54:44,677 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13253 to 13253. [2021-12-06 22:54:44,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13253 states, 9348 states have (on average 1.392811296534018) internal successors, (13020), 9851 states have internal predecessors, (13020), 3059 states have call successors, (3059), 834 states have call predecessors, (3059), 845 states have return successors, (3244), 2801 states have call predecessors, (3244), 3057 states have call successors, (3244) [2021-12-06 22:54:44,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13253 states to 13253 states and 19323 transitions. [2021-12-06 22:54:44,728 INFO L78 Accepts]: Start accepts. Automaton has 13253 states and 19323 transitions. Word has length 291 [2021-12-06 22:54:44,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:44,729 INFO L470 AbstractCegarLoop]: Abstraction has 13253 states and 19323 transitions. [2021-12-06 22:54:44,729 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 54.333333333333336) internal successors, (163), 3 states have internal predecessors, (163), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:54:44,729 INFO L276 IsEmpty]: Start isEmpty. Operand 13253 states and 19323 transitions. [2021-12-06 22:54:44,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 291 [2021-12-06 22:54:44,747 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:44,747 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:44,772 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (20)] Ended with exit code 0 [2021-12-06 22:54:44,948 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:44,949 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:44,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:44,950 INFO L85 PathProgramCache]: Analyzing trace with hash -1034291622, now seen corresponding path program 1 times [2021-12-06 22:54:44,954 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:44,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [295204375] [2021-12-06 22:54:44,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:44,955 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:44,955 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:44,957 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:44,960 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (21)] Waiting until timeout for monitored process [2021-12-06 22:54:45,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:54:45,921 INFO L263 TraceCheckSpWp]: Trace formula consists of 1780 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:54:45,926 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:54:47,431 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-06 22:54:47,432 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:54:47,432 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:54:47,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [295204375] [2021-12-06 22:54:47,432 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [295204375] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:54:47,432 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:54:47,432 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:54:47,433 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [727791471] [2021-12-06 22:54:47,433 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:54:47,434 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:54:47,434 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:54:47,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:54:47,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:47,435 INFO L87 Difference]: Start difference. First operand 13253 states and 19323 transitions. Second operand has 3 states, 3 states have (on average 54.0) internal successors, (162), 3 states have internal predecessors, (162), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:54:47,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:54:47,997 INFO L93 Difference]: Finished difference Result 26453 states and 38572 transitions. [2021-12-06 22:54:47,998 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:54:47,998 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 54.0) internal successors, (162), 3 states have internal predecessors, (162), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 290 [2021-12-06 22:54:47,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:54:48,038 INFO L225 Difference]: With dead ends: 26453 [2021-12-06 22:54:48,038 INFO L226 Difference]: Without dead ends: 13233 [2021-12-06 22:54:48,067 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 288 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:54:48,067 INFO L933 BasicCegarLoop]: 2252 mSDtfsCounter, 2241 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2241 SdHoareTripleChecker+Valid, 2252 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:54:48,067 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2241 Valid, 2252 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:54:48,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13233 states. [2021-12-06 22:54:48,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13233 to 13233. [2021-12-06 22:54:48,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13233 states, 9338 states have (on average 1.39216106232598) internal successors, (13000), 9841 states have internal predecessors, (13000), 3049 states have call successors, (3049), 834 states have call predecessors, (3049), 845 states have return successors, (3229), 2791 states have call predecessors, (3229), 3047 states have call successors, (3229) [2021-12-06 22:54:48,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13233 states to 13233 states and 19278 transitions. [2021-12-06 22:54:48,631 INFO L78 Accepts]: Start accepts. Automaton has 13233 states and 19278 transitions. Word has length 290 [2021-12-06 22:54:48,631 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:54:48,631 INFO L470 AbstractCegarLoop]: Abstraction has 13233 states and 19278 transitions. [2021-12-06 22:54:48,632 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 54.0) internal successors, (162), 3 states have internal predecessors, (162), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-06 22:54:48,632 INFO L276 IsEmpty]: Start isEmpty. Operand 13233 states and 19278 transitions. [2021-12-06 22:54:48,646 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 316 [2021-12-06 22:54:48,646 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:54:48,646 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:54:48,671 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (21)] Forceful destruction successful, exit code 0 [2021-12-06 22:54:48,847 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:54:48,848 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:54:48,849 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:54:48,849 INFO L85 PathProgramCache]: Analyzing trace with hash 924065820, now seen corresponding path program 1 times [2021-12-06 22:54:48,853 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:54:48,853 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [833174840] [2021-12-06 22:54:48,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:54:48,854 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:54:48,854 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:54:48,856 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:54:48,859 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (22)] Waiting until timeout for monitored process [2021-12-06 22:54:55,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 22:54:55,122 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 22:55:04,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 22:55:06,088 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-06 22:55:06,088 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 22:55:06,089 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 22:55:06,125 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (22)] Ended with exit code 0 [2021-12-06 22:55:06,291 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:55:06,294 INFO L732 BasicCegarLoop]: Path program histogram: [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:55:06,297 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 22:55:06,396 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 22:55:06,400 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 22:55:06,770 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 10:55:06 BoogieIcfgContainer [2021-12-06 22:55:06,771 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 22:55:06,771 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 22:55:06,771 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 22:55:06,771 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 22:55:06,771 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:53:34" (3/4) ... [2021-12-06 22:55:06,773 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 22:55:06,773 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 22:55:06,774 INFO L158 Benchmark]: Toolchain (without parser) took 140811.23ms. Allocated memory was 60.8MB in the beginning and 1.7GB in the end (delta: 1.7GB). Free memory was 28.2MB in the beginning and 725.0MB in the end (delta: -696.8MB). Peak memory consumption was 956.3MB. Max. memory is 16.1GB. [2021-12-06 22:55:06,774 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 60.8MB. Free memory is still 41.7MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:55:06,774 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2121.41ms. Allocated memory was 60.8MB in the beginning and 132.1MB in the end (delta: 71.3MB). Free memory was 28.0MB in the beginning and 57.0MB in the end (delta: -29.0MB). Peak memory consumption was 61.5MB. Max. memory is 16.1GB. [2021-12-06 22:55:06,774 INFO L158 Benchmark]: Boogie Procedure Inliner took 162.85ms. Allocated memory is still 132.1MB. Free memory was 57.0MB in the beginning and 58.7MB in the end (delta: -1.7MB). Peak memory consumption was 13.5MB. Max. memory is 16.1GB. [2021-12-06 22:55:06,775 INFO L158 Benchmark]: Boogie Preprocessor took 161.28ms. Allocated memory was 132.1MB in the beginning and 216.0MB in the end (delta: 83.9MB). Free memory was 58.7MB in the beginning and 131.3MB in the end (delta: -72.6MB). Peak memory consumption was 27.2MB. Max. memory is 16.1GB. [2021-12-06 22:55:06,775 INFO L158 Benchmark]: RCFGBuilder took 46436.28ms. Allocated memory is still 216.0MB. Free memory was 131.3MB in the beginning and 101.4MB in the end (delta: 29.9MB). Peak memory consumption was 82.9MB. Max. memory is 16.1GB. [2021-12-06 22:55:06,775 INFO L158 Benchmark]: TraceAbstraction took 91920.99ms. Allocated memory was 216.0MB in the beginning and 1.7GB in the end (delta: 1.5GB). Free memory was 100.4MB in the beginning and 725.0MB in the end (delta: -624.6MB). Peak memory consumption was 1.3GB. Max. memory is 16.1GB. [2021-12-06 22:55:06,775 INFO L158 Benchmark]: Witness Printer took 2.52ms. Allocated memory is still 1.7GB. Free memory is still 725.0MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:55:06,777 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 60.8MB. Free memory is still 41.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2121.41ms. Allocated memory was 60.8MB in the beginning and 132.1MB in the end (delta: 71.3MB). Free memory was 28.0MB in the beginning and 57.0MB in the end (delta: -29.0MB). Peak memory consumption was 61.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 162.85ms. Allocated memory is still 132.1MB. Free memory was 57.0MB in the beginning and 58.7MB in the end (delta: -1.7MB). Peak memory consumption was 13.5MB. Max. memory is 16.1GB. * Boogie Preprocessor took 161.28ms. Allocated memory was 132.1MB in the beginning and 216.0MB in the end (delta: 83.9MB). Free memory was 58.7MB in the beginning and 131.3MB in the end (delta: -72.6MB). Peak memory consumption was 27.2MB. Max. memory is 16.1GB. * RCFGBuilder took 46436.28ms. Allocated memory is still 216.0MB. Free memory was 131.3MB in the beginning and 101.4MB in the end (delta: 29.9MB). Peak memory consumption was 82.9MB. Max. memory is 16.1GB. * TraceAbstraction took 91920.99ms. Allocated memory was 216.0MB in the beginning and 1.7GB in the end (delta: 1.5GB). Free memory was 100.4MB in the beginning and 725.0MB in the end (delta: -624.6MB). Peak memory consumption was 1.3GB. Max. memory is 16.1GB. * Witness Printer took 2.52ms. Allocated memory is still 1.7GB. Free memory is still 725.0MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8176]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6875. Possible FailurePath: [L4318] int ldv_timer_state_5 = 0; [L4319] int ldv_state_variable_8 ; [L4320] struct timer_list *ldv_timer_list_5 ; [L4321] struct timer_list *ldv_timer_list_4 ; [L4322] struct work_struct *ldv_work_struct_3_1 ; [L4323] struct mmc_host *vub300_mmc_ops_group0 ; [L4324] struct work_struct *ldv_work_struct_1_3 ; [L4325] int ldv_state_variable_0 ; [L4326] int ldv_state_variable_5 ; [L4327] int ldv_work_1_1 ; [L4328] int ldv_work_3_2 ; [L4329] int ldv_work_3_0 ; [L4330] struct work_struct *ldv_work_struct_2_3 ; [L4331] struct work_struct *ldv_work_struct_2_0 ; [L4332] int ldv_timer_state_6 = 0; [L4333] struct work_struct *ldv_work_struct_2_2 ; [L4334] int ldv_timer_state_4 = 0; [L4335] int ref_cnt ; [L4336] int ldv_work_3_3 ; [L4337] int ldv_state_variable_1 ; [L4338] int ldv_state_variable_7 ; [L4339] struct work_struct *ldv_work_struct_3_3 ; [L4340] struct work_struct *ldv_work_struct_1_0 ; [L4341] struct work_struct *ldv_work_struct_1_1 ; [L4342] int ldv_work_1_3 ; [L4343] struct work_struct *ldv_work_struct_2_1 ; [L4344] struct timer_list *ldv_timer_list_6 ; [L4345] struct work_struct *ldv_work_struct_3_2 ; [L4346] int ldv_state_variable_6 ; [L4347] int ldv_work_3_1 ; [L4348] int ldv_state_variable_2 ; [L4349] int ldv_work_2_0 ; [L4350] int usb_counter ; [L4351] struct work_struct *ldv_work_struct_3_0 ; [L4352] int ldv_work_1_2 ; [L4353] int LDV_IN_INTERRUPT = 1; [L4354] struct work_struct *ldv_work_struct_1_2 ; [L4355] int ldv_work_2_2 ; [L4356] int ldv_state_variable_3 ; [L4357] struct usb_interface *vub300_driver_group1 ; [L4358] int ldv_work_1_0 ; [L4359] int ldv_work_2_3 ; [L4360] int ldv_state_variable_4 ; [L4361] int ldv_work_2_1 ; [L4422] static bool limit_speed_to_24_MHz ; [L4423] static bool pad_input_to_usb_pkt ; [L4424] static bool disable_offload_processing ; [L4425] static bool force_1_bit_data_xfers ; [L4426] static bool force_polling_for_irqs ; [L4427] static int firmware_irqpoll_timeout = 1024; [L4428] static int force_max_req_size = 128; [L4429] static int firmware_rom_wait_states = 28; [L4430-L4435] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4436] struct usb_device_id const __mod_usb_device_table ; [L4437] static struct workqueue_struct *cmndworkqueue ; [L4438] static struct workqueue_struct *pollworkqueue ; [L4439] static struct workqueue_struct *deadworkqueue ; [L6425-L6427] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6835-L6841] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6914] int ldv_retval_0 ; [L6916] int ldv_retval_1 ; [L6919] int ldv_retval_3 ; [L6920] int ldv_retval_2 ; [L8179] int URB_STATE = 0; [L8180] int DEV_STATE = 0; [L8181] int INTERF_STATE = 0; [L8182] int SERIAL_STATE = 0; [L8183] void *usb_intfdata = (void *)0; [L8184] struct urb *int_urb = (struct urb *)0; [L8185] struct urb *bulk_urb = (struct urb *)0; [L8186] void (*completeFnInt)(struct urb * ) ; [L8187] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7559] struct usb_device_id *ldvarg1 ; [L7560] void *tmp ; [L7561] pm_message_t ldvarg0 ; [L7562] struct mmc_card *ldvarg4 ; [L7563] void *tmp___0 ; [L7564] struct mmc_ios *ldvarg3 ; [L7565] void *tmp___1 ; [L7566] int ldvarg5 ; [L7567] struct mmc_request *ldvarg2 ; [L7568] void *tmp___2 ; [L7569] int tmp___3 ; [L7570] int tmp___4 ; [L7571] int tmp___5 ; [L7572] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-9223372036854771703:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-9223372036854771703:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-9223372036854771703:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-9223372036854771703:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-9223372036854771703:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-9223372036854771703:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-9223372036854771703:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={-9223372036854771703:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-9223372036854771703:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-9223372036854771703:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-9223372036854771703:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={-9223372036854771703:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] tmp = ldv_init_zalloc(32UL) [L7575] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] CALL, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={137:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={137:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={137:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={137:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={137:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={137:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={137:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1816, \result={137:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={137:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={137:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={137:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] RET, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1816UL)={137:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] tmp___0 = ldv_init_zalloc(1816UL) [L7577] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4105:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4105:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4105:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={4105:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4105:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4105:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={4105:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={4105:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4105:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4105:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={4105:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={4105:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] tmp___1 = ldv_init_zalloc(16UL) [L7579] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-6917529027641081844:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-6917529027641081844:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6917529027641081844:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-6917529027641081844:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-6917529027641081844:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6917529027641081844:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-6917529027641081844:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={-6917529027641081844:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-6917529027641081844:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6917529027641081844:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-6917529027641081844:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={-6917529027641081844:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] tmp___2 = ldv_init_zalloc(136UL) [L7581] ldvarg2 = (struct mmc_request *)tmp___2 [L7582] FCALL ldv_initialize() [L7583] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018427383799:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018427383799:0}, s={-4611686018427383799:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-4611686018427383799:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018427383799:0}, s={-4611686018427383799:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-4611686018427383799:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018427383799:0}, s={-4611686018427383799:0}, SERIAL_STATE=0, tmp={-4611686018427383799:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7583] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={-4611686018427383799:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7584] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018427387889:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018427387889:0}, s={-4611686018427387889:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-4611686018427387889:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018427387889:0}, s={-4611686018427387889:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-4611686018427387889:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018427387889:0}, s={-4611686018427387889:0}, SERIAL_STATE=0, tmp={-4611686018427387889:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7584] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={-4611686018427387889:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7585] ldv_state_variable_6 = 1 [L7586] CALL work_init_3() [L6924] ldv_work_3_0 = 0 [L6925] ldv_work_3_1 = 0 [L6926] ldv_work_3_2 = 0 [L6927] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7586] RET work_init_3() [L7587] ldv_state_variable_3 = 1 [L7588] ldv_state_variable_7 = 0 [L7589] CALL work_init_2() [L6974] ldv_work_2_0 = 0 [L6975] ldv_work_2_1 = 0 [L6976] ldv_work_2_2 = 0 [L6977] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7589] RET work_init_2() [L7590] ldv_state_variable_2 = 1 [L7591] ldv_state_variable_8 = 0 [L7592] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7592] RET work_init_1() [L7593] ldv_state_variable_1 = 1 [L7594] ldv_state_variable_4 = 1 [L7595] ref_cnt = 0 [L7596] ldv_state_variable_0 = 1 [L7597] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, tmp___3=7, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: [L7752] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7753] COND TRUE ldv_state_variable_0 == 1 [L7754] CALL, EXPR vub300_init() [L6844] int result ; [L6845] struct lock_class_key __key ; [L6846] char const *__lock_name ; [L6847] struct workqueue_struct *tmp ; [L6848] struct lock_class_key __key___0 ; [L6849] char const *__lock_name___0 ; [L6850] struct workqueue_struct *tmp___0 ; [L6851] struct lock_class_key __key___1 ; [L6852] char const *__lock_name___1 ; [L6853] struct workqueue_struct *tmp___1 ; [L6857] __lock_name = "kvub300c" [L6858] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6859] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:-9223372036854775808}, __key={-2305561534236983164:0}, __key___0={-2305843009213693816:0}, __key___1={-4611686018427387892:0}, __lock_name={73:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:-9223372036854775808}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6860] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6866] __lock_name___0 = "kvub300p" [L6867] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6868] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:-9223372036854775808}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372035781033984:0}, __key={-2305561534236983164:0}, __key___0={-2305843009213693816:0}, __key___1={-4611686018427387892:0}, __lock_name={73:0}, __lock_name___0={76:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:-9223372036854775808}, tmp___0={-9223372035781033984:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6869] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6875] __lock_name___1 = "kvub300d" [L6876] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6877] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:-9223372036854775808}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={0:-9223371899415818240}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372035781033984:0}, __key={-2305561534236983164:0}, __key___0={-2305843009213693816:0}, __key___1={-4611686018427387892:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:-9223372036854775808}, tmp___0={-9223372035781033984:0}, tmp___1={0:-9223371899415818240}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6878] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] CALL, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L8081] ldv_func_ret_type___12 ldv_func_res ; [L8082] int tmp ; [L8084] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8556] return __VERIFIER_nondet_int(); [L8084] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8084] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8085] ldv_func_res = tmp [L8086] ldv_state_variable_7 = 1 [L8087] usb_counter = 0 [L8088] CALL ldv_usb_driver_7() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={2305843009213693964:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={2305843009213693964:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={2305843009213693964:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={2305843009213693964:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, cond=1, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={2305843009213693964:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={2305843009213693964:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={2305843009213693964:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={2305843009213693964:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={2305843009213693964:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={2305843009213693964:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={2305843009213693964:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={2305843009213693964:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={2305843009213693964:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L8088] RET ldv_usb_driver_7() [L8089] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={86:0}, ldv_func_arg1={86:0}, ldv_func_arg2={94:93}, ldv_func_arg2={94:93}, ldv_func_arg3={82:0}, ldv_func_arg3={82:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6884] RET, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6884] result = ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6885] COND FALSE !(result != 0) [L6890] return (0); [L6890] return (0); [L6890] return (0); [L6890] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:-9223372036854775808}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={0:-9223371899415818240}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372035781033984:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={0:-9223372036854775808}, tmp___0={-9223372035781033984:0}, tmp___1={0:-9223371899415818240}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7754] RET, EXPR vub300_init() [L7754] ldv_retval_3 = vub300_init() [L7755] COND TRUE ldv_retval_3 == 0 [L7756] ldv_state_variable_0 = 3 [L7757] ldv_state_variable_8 = 1 [L7758] CALL ldv_initialize_mmc_host_ops_8() [L7193] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={1032:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={1032:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1032:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={1032:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, cond=1, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={1032:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1032:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={1032:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={1032:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={1032:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={1032:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={1032:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={1032:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] tmp = ldv_init_zalloc(2624UL) [L7196] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={1032:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7758] RET ldv_initialize_mmc_host_ops_8() [L7761] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, tmp___3=2, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7614] COND TRUE ldv_state_variable_7 != 0 [L7615] tmp___4 = __VERIFIER_nondet_int() [L7617] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7618] COND TRUE ldv_state_variable_7 == 1 [L7619] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6430] struct vub300_mmc_host *vub300 ; [L6431] struct usb_host_interface *iface_desc ; [L6432] struct usb_device *udev ; [L6433] struct usb_device *tmp ; [L6434] struct usb_device *tmp___0 ; [L6435] int i ; [L6436] int retval ; [L6437] struct urb *command_out_urb ; [L6438] struct urb *command_res_urb ; [L6439] struct mmc_host *mmc ; [L6440] char manufacturer[48U] ; [L6441] char product[32U] ; [L6442] char serial_number[32U] ; [L6443] void *tmp___1 ; [L6444] struct lock_class_key __key ; [L6445] struct lock_class_key __key___0 ; [L6446] int tmp___2 ; [L6447] struct usb_endpoint_descriptor *endpoint ; [L6448] int tmp___4 ; [L6449] char *tmp___5 ; [L6450] int tmp___6 ; [L6451] int tmp___7 ; [L6452] int tmp___8 ; [L6453] unsigned int tmp___9 ; [L6454] unsigned int tmp___10 ; [L6455] unsigned int tmp___11 ; [L6456] struct lock_class_key __key___1 ; [L6457] atomic_long_t __constr_expr_0 ; [L6458] struct lock_class_key __key___2 ; [L6459] atomic_long_t __constr_expr_1 ; [L6460] struct lock_class_key __key___3 ; [L6461] atomic_long_t __constr_expr_2 ; [L6462] int tmp___12 ; [L6463] int tmp___13 ; [L6465] CALL, EXPR interface_to_usbdev(interface) [L7824] struct usb_device *tmp ; [L7826] CALL, EXPR ldv_interface_to_usbdev() [L8302] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8307] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND FALSE !(tmp___0 != 0) [L4246] tmp = malloc(size) [L4247] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-9223372036854775799:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-9223372036854775799:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L4248] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, cond=1, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L4248] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-9223372036854775799:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-9223372036854775799:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L4249] return (p); VAL [={0:0}, ={0:0}, \old(size)=1678, \result={-9223372036854775799:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-9223372036854775799:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-9223372036854775799:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8307] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-9223372036854775799:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8307] result = ldv_malloc(sizeof(struct usb_device)) [L8308] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8312] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-9223372036854775799:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, result={-9223372036854775799:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7826] RET, EXPR ldv_interface_to_usbdev() [L7826] tmp = ldv_interface_to_usbdev() [L7827] return (tmp); VAL [={0:0}, ={0:0}, \result={-9223372036854775799:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={2305843009213693964:0}, intf={2305843009213693964:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854775799:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6465] RET, EXPR interface_to_usbdev(interface) [L6465] tmp = interface_to_usbdev(interface) [L6466] CALL, EXPR ldv_usb_get_dev_43(tmp) [L8021] CALL ldv_get_dev(ldv_func_arg1) [L8318] DEV_STATE = DEV_STATE + 1 [L8319] return (data); VAL [={0:0}, ={0:0}, \result={-9223372036854775799:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, data={-9223372036854775799:0}, data={-9223372036854775799:0}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8021] RET ldv_get_dev(ldv_func_arg1) [L8022] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036854775799:0}, ldv_func_arg1={-9223372036854775799:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6466] RET, EXPR ldv_usb_get_dev_43(tmp) [L6466] tmp___0 = ldv_usb_get_dev_43(tmp) [L6467] udev = tmp___0 [L6468] retval = -12 [L6469] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={-4611686018427387835:0}, __constr_expr_1={-2305843009213693859:0}, __constr_expr_2={-2305843009213693875:0}, __key={-4611686018427387575:0}, __key___0={-4611686018427387766:0}, __key___1={-2305843009213693843:0}, __key___2={-2305843009213693816:0}, __key___3={-2305843009213693827:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-9223372036854771703:0}, id={-9223372036854771703:0}, int_urb={0:0}, INTERF_STATE=0, interface={2305843009213693964:0}, interface={2305843009213693964:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-4611686001247518709:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, product={-2305702271725338487:0}, ref_cnt=0, retval=4294967284, serial_number={-4611686018427387831:0}, SERIAL_STATE=0, tmp={-9223372036854775799:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6469-L6470] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={-4611686001247518709:0}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6469-L6470] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-4611686018427387835:0}, __constr_expr_1={-2305843009213693859:0}, __constr_expr_2={-2305843009213693875:0}, __key={-4611686018427387575:0}, __key___0={-4611686018427387766:0}, __key___1={-2305843009213693843:0}, __key___2={-2305843009213693816:0}, __key___3={-2305843009213693827:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-9223372036854771703:0}, id={-9223372036854771703:0}, int_urb={0:0}, INTERF_STATE=0, interface={2305843009213693964:0}, interface={2305843009213693964:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-4611686001247518709:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, product={-2305702271725338487:0}, ref_cnt=0, retval=4294967284, serial_number={-4611686018427387831:0}, SERIAL_STATE=0, tmp={-9223372036854775799:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=94, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6471] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={-4611686018427387835:0}, __constr_expr_1={-2305843009213693859:0}, __constr_expr_2={-2305843009213693875:0}, __key={-4611686018427387575:0}, __key___0={-4611686018427387766:0}, __key___1={-2305843009213693843:0}, __key___2={-2305843009213693816:0}, __key___3={-2305843009213693827:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-9223372036854771703:0}, id={-9223372036854771703:0}, int_urb={0:0}, INTERF_STATE=0, interface={2305843009213693964:0}, interface={2305843009213693964:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-4611686001247518709:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, product={-2305702271725338487:0}, ref_cnt=0, retval=4294967284, serial_number={-4611686018427387831:0}, SERIAL_STATE=0, tmp={-9223372036854775799:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6471] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={-2305702271725338487:0}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6471] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-4611686018427387835:0}, __constr_expr_1={-2305843009213693859:0}, __constr_expr_2={-2305843009213693875:0}, __key={-4611686018427387575:0}, __key___0={-4611686018427387766:0}, __key___1={-2305843009213693843:0}, __key___2={-2305843009213693816:0}, __key___3={-2305843009213693827:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-9223372036854771703:0}, id={-9223372036854771703:0}, int_urb={0:0}, INTERF_STATE=0, interface={2305843009213693964:0}, interface={2305843009213693964:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-4611686001247518709:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, product={-2305702271725338487:0}, ref_cnt=0, retval=4294967284, serial_number={-4611686018427387831:0}, SERIAL_STATE=0, tmp={-9223372036854775799:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=95, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6472] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={-4611686018427387835:0}, __constr_expr_1={-2305843009213693859:0}, __constr_expr_2={-2305843009213693875:0}, __key={-4611686018427387575:0}, __key___0={-4611686018427387766:0}, __key___1={-2305843009213693843:0}, __key___2={-2305843009213693816:0}, __key___3={-2305843009213693827:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-9223372036854771703:0}, id={-9223372036854771703:0}, int_urb={0:0}, INTERF_STATE=0, interface={2305843009213693964:0}, interface={2305843009213693964:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-4611686001247518709:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, product={-2305702271725338487:0}, ref_cnt=0, retval=4294967284, serial_number={-4611686018427387831:0}, SERIAL_STATE=0, tmp={-9223372036854775799:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6472-L6473] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={-4611686018427387831:0}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6472-L6473] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-4611686018427387835:0}, __constr_expr_1={-2305843009213693859:0}, __constr_expr_2={-2305843009213693875:0}, __key={-4611686018427387575:0}, __key___0={-4611686018427387766:0}, __key___1={-2305843009213693843:0}, __key___2={-2305843009213693816:0}, __key___3={-2305843009213693827:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-9223372036854771703:0}, id={-9223372036854771703:0}, int_urb={0:0}, INTERF_STATE=0, interface={2305843009213693964:0}, interface={2305843009213693964:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-4611686001247518709:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, product={-2305702271725338487:0}, ref_cnt=0, retval=4294967284, serial_number={-4611686018427387831:0}, SERIAL_STATE=0, tmp={-9223372036854775799:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=96, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6475] udev->descriptor.idVendor [L6475] udev->descriptor.idProduct [L6477] CALL, EXPR ldv_usb_alloc_urb_44(0, 208U) [L8027] ldv_func_ret_type___10 ldv_func_res ; [L8028] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8030] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8532] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND TRUE tmp___0 != 0 [L4244] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=2147483648, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8532] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0=null, arg1=208, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8532] return ldv_malloc(sizeof(struct urb)); [L8030] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8030] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8031] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8032] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8211] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8032] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8033] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6477] RET, EXPR ldv_usb_alloc_urb_44(0, 208U) [L6477] command_out_urb = ldv_usb_alloc_urb_44(0, 208U) [L6478] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6479] retval = -12 [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, command_out_urb={0:0}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-9223372036854771703:0}, id={-9223372036854771703:0}, int_urb={0:0}, INTERF_STATE=0, interface={2305843009213693964:0}, interface={2305843009213693964:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, retval=4294967284, SERIAL_STATE=0, tmp={-9223372036854775799:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7619] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7619] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7620] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, tmp___3=7, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7745] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7746] CALL vub300_exit() [L6904] CALL ldv_usb_deregister_60(& vub300_driver) [L8119] FCALL usb_deregister(arg) [L8120] ldv_state_variable_7 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg={86:0}, arg={86:0}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6904] RET ldv_usb_deregister_60(& vub300_driver) [L6905] CALL ldv_flush_workqueue_61(cmndworkqueue) [L8127] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8128] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8128] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6905] RET ldv_flush_workqueue_61(cmndworkqueue) [L6906] CALL ldv_flush_workqueue_62(pollworkqueue) [L8135] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372035781033984:0}, ldv_func_arg1={-9223372035781033984:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8136] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8136] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372035781033984:0}, ldv_func_arg1={-9223372035781033984:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6906] RET ldv_flush_workqueue_62(pollworkqueue) [L6907] CALL ldv_flush_workqueue_63(deadworkqueue) [L8143] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223371899415818240}, ldv_func_arg1={0:-9223371899415818240}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8144] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8144] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223371899415818240}, ldv_func_arg1={0:-9223371899415818240}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6907] RET ldv_flush_workqueue_63(deadworkqueue) [L6908] CALL ldv_destroy_workqueue_64(cmndworkqueue) [L8151] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8152] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8152] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6908] RET ldv_destroy_workqueue_64(cmndworkqueue) [L6909] CALL ldv_destroy_workqueue_65(pollworkqueue) [L8159] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372035781033984:0}, ldv_func_arg1={-9223372035781033984:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8160] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8160] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372035781033984:0}, ldv_func_arg1={-9223372035781033984:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6909] RET ldv_destroy_workqueue_65(pollworkqueue) [L6910] CALL ldv_destroy_workqueue_66(deadworkqueue) [L8167] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223371899415818240}, ldv_func_arg1={0:-9223371899415818240}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8168] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8168] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223371899415818240}, ldv_func_arg1={0:-9223371899415818240}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L6910] RET ldv_destroy_workqueue_66(deadworkqueue) [L7746] RET vub300_exit() [L7747] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018427383799:0}, ldvarg1={-9223372036854771703:0}, ldvarg2={-6917529027641081844:0}, ldvarg3={4105:0}, ldvarg4={137:0}, ldvarg5={-4611686018427387889:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854771703:0}, tmp___0={137:0}, tmp___1={4105:0}, tmp___2={-6917529027641081844:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L7788] CALL ldv_check_final_state() [L8380] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8384] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8385] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] [L8176] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:-9223372036854775808}, deadworkqueue={0:-9223371899415818240}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372035781033984:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={2305843009213693964:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={1032:0}, vub300_table={84:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1587 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 91.4s, OverallIterations: 21, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.3s, AutomataDifference: 19.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 28324 SdHoareTripleChecker+Valid, 10.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 28171 mSDsluCounter, 156399 SdHoareTripleChecker+Invalid, 9.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 104828 mSDsCounter, 496 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1015 IncrementalHoareTripleChecker+Invalid, 1511 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 496 mSolverCounterUnsat, 51571 mSDtfsCounter, 1015 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 4205 GetRequests, 4118 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 7.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=21529occurred in iteration=15, InterpolantAutomatonStates: 100, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.7s AutomataMinimizationTime, 20 MinimizatonAttempts, 9614 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.9s SsaConstructionTime, 14.2s SatisfiabilityAnalysisTime, 29.5s InterpolantComputationTime, 4161 NumberOfCodeBlocks, 3966 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 4180 ConstructedInterpolants, 0 QuantifiedInterpolants, 5797 SizeOfPredicates, 21 NumberOfNonLiveVariables, 25741 ConjunctsInSsa, 82 ConjunctsInUnsatCore, 23 InterpolantComputations, 17 PerfectInterpolantSequences, 3873/3940 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 22:55:06,874 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e0a7c478-11b8-4630-b3a4-0ff656604b9a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample