./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 0f420ae29f1d217fd86475befc2729bf689978fed36c08e1357ee5c24faa0f48 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 22:45:17,962 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 22:45:17,964 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 22:45:17,995 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 22:45:17,996 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 22:45:17,997 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 22:45:17,999 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 22:45:18,001 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 22:45:18,003 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 22:45:18,004 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 22:45:18,005 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 22:45:18,006 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 22:45:18,007 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 22:45:18,008 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 22:45:18,009 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 22:45:18,011 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 22:45:18,012 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 22:45:18,013 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 22:45:18,015 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 22:45:18,017 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 22:45:18,019 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 22:45:18,020 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 22:45:18,022 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 22:45:18,023 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 22:45:18,026 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 22:45:18,027 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 22:45:18,027 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 22:45:18,028 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 22:45:18,029 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 22:45:18,030 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 22:45:18,030 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 22:45:18,031 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 22:45:18,032 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 22:45:18,032 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 22:45:18,033 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 22:45:18,034 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 22:45:18,034 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 22:45:18,034 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 22:45:18,035 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 22:45:18,035 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 22:45:18,036 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 22:45:18,037 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-06 22:45:18,059 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 22:45:18,059 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 22:45:18,060 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 22:45:18,060 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 22:45:18,060 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 22:45:18,061 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 22:45:18,061 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 22:45:18,061 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 22:45:18,062 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 22:45:18,062 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 22:45:18,062 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 22:45:18,062 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 22:45:18,062 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 22:45:18,063 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 22:45:18,063 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 22:45:18,063 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 22:45:18,063 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 22:45:18,063 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 22:45:18,063 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 22:45:18,064 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 22:45:18,064 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 22:45:18,064 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:45:18,064 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 22:45:18,064 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 22:45:18,064 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 22:45:18,065 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 22:45:18,065 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 22:45:18,065 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 22:45:18,065 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 22:45:18,065 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 22:45:18,065 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 22:45:18,066 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0f420ae29f1d217fd86475befc2729bf689978fed36c08e1357ee5c24faa0f48 [2021-12-06 22:45:18,267 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 22:45:18,284 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 22:45:18,286 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 22:45:18,287 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 22:45:18,287 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 22:45:18,288 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:45:18,330 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data/8eacc767c/a354864068f049f3a2d519d80b7369b5/FLAGe77ae5699 [2021-12-06 22:45:18,937 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 22:45:18,938 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:45:18,962 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data/8eacc767c/a354864068f049f3a2d519d80b7369b5/FLAGe77ae5699 [2021-12-06 22:45:19,383 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data/8eacc767c/a354864068f049f3a2d519d80b7369b5 [2021-12-06 22:45:19,390 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 22:45:19,393 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 22:45:19,396 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 22:45:19,397 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 22:45:19,406 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 22:45:19,408 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:45:19" (1/1) ... [2021-12-06 22:45:19,411 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@10aa28d6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:19, skipping insertion in model container [2021-12-06 22:45:19,412 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:45:19" (1/1) ... [2021-12-06 22:45:19,429 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 22:45:19,524 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:45:20,674 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[238753,238766] [2021-12-06 22:45:20,707 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:45:20,724 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 22:45:20,947 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[238753,238766] [2021-12-06 22:45:20,954 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:45:21,025 INFO L208 MainTranslator]: Completed translation [2021-12-06 22:45:21,025 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21 WrapperNode [2021-12-06 22:45:21,025 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 22:45:21,026 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 22:45:21,027 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 22:45:21,027 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 22:45:21,033 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,092 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,223 INFO L137 Inliner]: procedures = 257, calls = 1800, calls flagged for inlining = 103, calls inlined = 99, statements flattened = 4507 [2021-12-06 22:45:21,224 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 22:45:21,224 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 22:45:21,225 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 22:45:21,225 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 22:45:21,233 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,233 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,253 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,253 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,327 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,343 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,385 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,414 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 22:45:21,415 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 22:45:21,415 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 22:45:21,415 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 22:45:21,416 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (1/1) ... [2021-12-06 22:45:21,423 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:45:21,435 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:45:21,448 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 22:45:21,454 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 22:45:21,484 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-12-06 22:45:21,484 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-12-06 22:45:21,484 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 22:45:21,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 22:45:21,485 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 22:45:21,485 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 22:45:21,485 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-06 22:45:21,485 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-06 22:45:21,485 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-12-06 22:45:21,485 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-12-06 22:45:21,485 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_11 [2021-12-06 22:45:21,485 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_11 [2021-12-06 22:45:21,485 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-12-06 22:45:21,485 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-12-06 22:45:21,486 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-12-06 22:45:21,486 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-12-06 22:45:21,486 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-06 22:45:21,486 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-06 22:45:21,486 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-12-06 22:45:21,486 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-12-06 22:45:21,486 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 22:45:21,486 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 22:45:21,486 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-06 22:45:21,486 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-06 22:45:21,486 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-12-06 22:45:21,486 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-12-06 22:45:21,487 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-12-06 22:45:21,487 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-12-06 22:45:21,487 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-12-06 22:45:21,487 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-12-06 22:45:21,487 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 22:45:21,487 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 22:45:21,487 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 22:45:21,487 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 22:45:21,487 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_49 [2021-12-06 22:45:21,487 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_49 [2021-12-06 22:45:21,487 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 22:45:21,487 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 22:45:21,488 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-12-06 22:45:21,488 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-12-06 22:45:21,488 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-12-06 22:45:21,488 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-12-06 22:45:21,488 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-12-06 22:45:21,488 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-12-06 22:45:21,488 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-12-06 22:45:21,488 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-12-06 22:45:21,488 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-12-06 22:45:21,489 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-12-06 22:45:21,489 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-12-06 22:45:21,489 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-12-06 22:45:21,489 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_26 [2021-12-06 22:45:21,489 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_26 [2021-12-06 22:45:21,489 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 22:45:21,489 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_28 [2021-12-06 22:45:21,489 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_28 [2021-12-06 22:45:21,489 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-06 22:45:21,489 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-06 22:45:21,490 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-12-06 22:45:21,490 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-12-06 22:45:21,490 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 22:45:21,490 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2021-12-06 22:45:21,490 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2021-12-06 22:45:21,490 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-12-06 22:45:21,490 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-12-06 22:45:21,490 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-12-06 22:45:21,490 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-12-06 22:45:21,490 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-12-06 22:45:21,491 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-12-06 22:45:21,491 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_14 [2021-12-06 22:45:21,491 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_14 [2021-12-06 22:45:21,491 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-12-06 22:45:21,491 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-12-06 22:45:21,491 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 22:45:21,491 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 22:45:21,491 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-12-06 22:45:21,491 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-12-06 22:45:21,491 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-06 22:45:21,492 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-06 22:45:21,492 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-12-06 22:45:21,492 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-12-06 22:45:21,492 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-12-06 22:45:21,492 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-12-06 22:45:21,492 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-12-06 22:45:21,492 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-12-06 22:45:21,492 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-12-06 22:45:21,492 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-12-06 22:45:21,492 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-12-06 22:45:21,492 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-12-06 22:45:21,493 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-12-06 22:45:21,493 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-12-06 22:45:21,493 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-12-06 22:45:21,493 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-12-06 22:45:21,493 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-12-06 22:45:21,493 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-12-06 22:45:21,493 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-06 22:45:21,493 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-12-06 22:45:21,493 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-12-06 22:45:21,493 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-06 22:45:21,494 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-12-06 22:45:21,494 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-12-06 22:45:21,494 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-12-06 22:45:21,494 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-12-06 22:45:21,494 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-06 22:45:21,494 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_6 [2021-12-06 22:45:21,494 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_6 [2021-12-06 22:45:21,494 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-06 22:45:21,494 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-06 22:45:21,494 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 22:45:21,495 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 22:45:21,495 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-06 22:45:21,495 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-06 22:45:21,495 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-12-06 22:45:21,495 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-12-06 22:45:21,495 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-06 22:45:21,495 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-06 22:45:21,495 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 22:45:21,495 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 22:45:21,495 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-12-06 22:45:21,496 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-12-06 22:45:21,496 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-06 22:45:21,496 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-12-06 22:45:21,496 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-12-06 22:45:21,496 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-12-06 22:45:21,496 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-12-06 22:45:21,496 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-12-06 22:45:21,496 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-12-06 22:45:21,496 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 22:45:21,496 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 22:45:21,497 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_31 [2021-12-06 22:45:21,497 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_31 [2021-12-06 22:45:21,497 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-12-06 22:45:21,497 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-12-06 22:45:21,497 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 22:45:21,497 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_6 [2021-12-06 22:45:21,497 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_6 [2021-12-06 22:45:21,497 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-12-06 22:45:21,497 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-12-06 22:45:21,497 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-12-06 22:45:21,497 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-12-06 22:45:21,498 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-12-06 22:45:21,498 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-12-06 22:45:21,498 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-12-06 22:45:21,498 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-12-06 22:45:21,498 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 22:45:21,498 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-12-06 22:45:21,498 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-12-06 22:45:21,498 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_6 [2021-12-06 22:45:21,498 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_6 [2021-12-06 22:45:21,498 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_8 [2021-12-06 22:45:21,498 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_8 [2021-12-06 22:45:21,499 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-06 22:45:21,499 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-06 22:45:21,499 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 22:45:21,499 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-12-06 22:45:21,499 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-12-06 22:45:21,499 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 22:45:21,499 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 22:45:21,499 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-12-06 22:45:21,499 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-12-06 22:45:21,499 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-12-06 22:45:21,499 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-12-06 22:45:21,500 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-12-06 22:45:21,500 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-12-06 22:45:21,500 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-12-06 22:45:21,500 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-12-06 22:45:21,500 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-12-06 22:45:21,500 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-12-06 22:45:21,500 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-12-06 22:45:21,500 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-12-06 22:45:21,500 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-12-06 22:45:21,500 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-12-06 22:45:21,500 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-12-06 22:45:21,501 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-12-06 22:45:21,501 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-12-06 22:45:21,501 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-12-06 22:45:21,501 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-12-06 22:45:21,501 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-12-06 22:45:21,501 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-12-06 22:45:21,501 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-12-06 22:45:21,501 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-12-06 22:45:21,501 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-12-06 22:45:21,501 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2021-12-06 22:45:21,501 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2021-12-06 22:45:21,502 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_46 [2021-12-06 22:45:21,502 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_46 [2021-12-06 22:45:21,502 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-06 22:45:21,502 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-06 22:45:21,502 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 22:45:21,502 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-12-06 22:45:21,502 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-12-06 22:45:21,502 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-12-06 22:45:21,502 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-12-06 22:45:21,502 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-06 22:45:21,502 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-06 22:45:21,503 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-12-06 22:45:21,503 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-12-06 22:45:21,503 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-12-06 22:45:21,503 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-12-06 22:45:21,503 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-12-06 22:45:21,503 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 22:45:21,503 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 22:45:21,956 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 22:45:21,959 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 22:45:23,032 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 22:45:25,776 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 22:45:25,793 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 22:45:25,793 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-06 22:45:25,796 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:45:25 BoogieIcfgContainer [2021-12-06 22:45:25,797 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 22:45:25,798 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 22:45:25,798 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 22:45:25,800 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 22:45:25,800 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 10:45:19" (1/3) ... [2021-12-06 22:45:25,801 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6af9f0c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:45:25, skipping insertion in model container [2021-12-06 22:45:25,801 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:45:21" (2/3) ... [2021-12-06 22:45:25,801 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6af9f0c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:45:25, skipping insertion in model container [2021-12-06 22:45:25,801 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:45:25" (3/3) ... [2021-12-06 22:45:25,802 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:45:25,806 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 22:45:25,806 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 22:45:25,862 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 22:45:25,867 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 22:45:25,867 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 22:45:25,908 INFO L276 IsEmpty]: Start isEmpty. Operand has 1578 states, 1108 states have (on average 1.3998194945848375) internal successors, (1551), 1173 states have internal predecessors, (1551), 377 states have call successors, (377), 92 states have call predecessors, (377), 91 states have return successors, (368), 342 states have call predecessors, (368), 368 states have call successors, (368) [2021-12-06 22:45:25,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:45:25,922 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:45:25,922 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:45:25,923 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:45:25,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:45:25,926 INFO L85 PathProgramCache]: Analyzing trace with hash -695991338, now seen corresponding path program 1 times [2021-12-06 22:45:25,933 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:45:25,933 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1654805033] [2021-12-06 22:45:25,933 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:45:25,934 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:45:26,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:45:26,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:26,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:26,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:45:26,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:26,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:26,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:45:26,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:26,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:26,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:45:26,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:26,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:26,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:45:26,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:26,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:45:26,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:26,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:26,462 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:45:26,463 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:45:26,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1654805033] [2021-12-06 22:45:26,463 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1654805033] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:45:26,464 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:45:26,464 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:45:26,465 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [18076652] [2021-12-06 22:45:26,465 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:45:26,468 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:45:26,469 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:45:26,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:45:26,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:45:26,493 INFO L87 Difference]: Start difference. First operand has 1578 states, 1108 states have (on average 1.3998194945848375) internal successors, (1551), 1173 states have internal predecessors, (1551), 377 states have call successors, (377), 92 states have call predecessors, (377), 91 states have return successors, (368), 342 states have call predecessors, (368), 368 states have call successors, (368) Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:45:35,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:45:35,114 INFO L93 Difference]: Finished difference Result 3309 states and 4923 transitions. [2021-12-06 22:45:35,115 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 22:45:35,116 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-12-06 22:45:35,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:45:35,137 INFO L225 Difference]: With dead ends: 3309 [2021-12-06 22:45:35,138 INFO L226 Difference]: Without dead ends: 1720 [2021-12-06 22:45:35,150 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:45:35,152 INFO L933 BasicCegarLoop]: 2113 mSDtfsCounter, 1088 mSDsluCounter, 2300 mSDsCounter, 0 mSdLazyCounter, 2272 mSolverCounterSat, 964 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1118 SdHoareTripleChecker+Valid, 4413 SdHoareTripleChecker+Invalid, 3236 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 964 IncrementalHoareTripleChecker+Valid, 2272 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.4s IncrementalHoareTripleChecker+Time [2021-12-06 22:45:35,153 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1118 Valid, 4413 Invalid, 3236 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [964 Valid, 2272 Invalid, 0 Unknown, 0 Unchecked, 8.4s Time] [2021-12-06 22:45:35,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1720 states. [2021-12-06 22:45:35,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1720 to 1562. [2021-12-06 22:45:35,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1562 states, 1103 states have (on average 1.3907524932003625) internal successors, (1534), 1157 states have internal predecessors, (1534), 368 states have call successors, (368), 91 states have call predecessors, (368), 90 states have return successors, (363), 337 states have call predecessors, (363), 363 states have call successors, (363) [2021-12-06 22:45:35,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1562 states to 1562 states and 2265 transitions. [2021-12-06 22:45:35,287 INFO L78 Accepts]: Start accepts. Automaton has 1562 states and 2265 transitions. Word has length 114 [2021-12-06 22:45:35,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:45:35,287 INFO L470 AbstractCegarLoop]: Abstraction has 1562 states and 2265 transitions. [2021-12-06 22:45:35,288 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:45:35,288 INFO L276 IsEmpty]: Start isEmpty. Operand 1562 states and 2265 transitions. [2021-12-06 22:45:35,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:45:35,294 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:45:35,294 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:45:35,295 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 22:45:35,295 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:45:35,296 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:45:35,296 INFO L85 PathProgramCache]: Analyzing trace with hash 1398740446, now seen corresponding path program 1 times [2021-12-06 22:45:35,296 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:45:35,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1274680037] [2021-12-06 22:45:35,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:45:35,296 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:45:35,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:45:35,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:35,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:35,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:45:35,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:35,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:35,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:45:35,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:35,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:35,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:45:35,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:35,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:35,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:45:35,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:35,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:45:35,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:35,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:35,616 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:45:35,617 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:45:35,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1274680037] [2021-12-06 22:45:35,617 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1274680037] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:45:35,617 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:45:35,617 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:45:35,618 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1474259548] [2021-12-06 22:45:35,618 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:45:35,619 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:45:35,619 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:45:35,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:45:35,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:45:35,620 INFO L87 Difference]: Start difference. First operand 1562 states and 2265 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:45:44,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:45:44,723 INFO L93 Difference]: Finished difference Result 4952 states and 7650 transitions. [2021-12-06 22:45:44,724 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:45:44,724 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-12-06 22:45:44,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:45:44,753 INFO L225 Difference]: With dead ends: 4952 [2021-12-06 22:45:44,753 INFO L226 Difference]: Without dead ends: 3413 [2021-12-06 22:45:44,765 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:45:44,766 INFO L933 BasicCegarLoop]: 2659 mSDtfsCounter, 4276 mSDsluCounter, 3702 mSDsCounter, 0 mSdLazyCounter, 3059 mSolverCounterSat, 2259 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4480 SdHoareTripleChecker+Valid, 6361 SdHoareTripleChecker+Invalid, 5318 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2259 IncrementalHoareTripleChecker+Valid, 3059 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.8s IncrementalHoareTripleChecker+Time [2021-12-06 22:45:44,767 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4480 Valid, 6361 Invalid, 5318 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2259 Valid, 3059 Invalid, 0 Unknown, 0 Unchecked, 8.8s Time] [2021-12-06 22:45:44,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3413 states. [2021-12-06 22:45:44,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3413 to 3183. [2021-12-06 22:45:44,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3183 states, 2243 states have (on average 1.384306732055283) internal successors, (3105), 2358 states have internal predecessors, (3105), 735 states have call successors, (735), 180 states have call predecessors, (735), 204 states have return successors, (939), 697 states have call predecessors, (939), 730 states have call successors, (939) [2021-12-06 22:45:44,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3183 states to 3183 states and 4779 transitions. [2021-12-06 22:45:44,926 INFO L78 Accepts]: Start accepts. Automaton has 3183 states and 4779 transitions. Word has length 114 [2021-12-06 22:45:44,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:45:44,927 INFO L470 AbstractCegarLoop]: Abstraction has 3183 states and 4779 transitions. [2021-12-06 22:45:44,927 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:45:44,927 INFO L276 IsEmpty]: Start isEmpty. Operand 3183 states and 4779 transitions. [2021-12-06 22:45:44,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-12-06 22:45:44,930 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:45:44,930 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:45:44,930 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 22:45:44,930 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:45:44,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:45:44,931 INFO L85 PathProgramCache]: Analyzing trace with hash 410740249, now seen corresponding path program 1 times [2021-12-06 22:45:44,931 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:45:44,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1613604575] [2021-12-06 22:45:44,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:45:44,931 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:45:44,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:45:45,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:45,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:45,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:45:45,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:45,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:45,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:45:45,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:45,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:45,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:45:45,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:45,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:45,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:45:45,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:45,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:45:45,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:45,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:45,183 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:45:45,183 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:45:45,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1613604575] [2021-12-06 22:45:45,183 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1613604575] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:45:45,184 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:45:45,184 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:45:45,184 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2034684898] [2021-12-06 22:45:45,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:45:45,184 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:45:45,184 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:45:45,185 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:45:45,185 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:45:45,185 INFO L87 Difference]: Start difference. First operand 3183 states and 4779 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:45:55,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:45:55,686 INFO L93 Difference]: Finished difference Result 9935 states and 15966 transitions. [2021-12-06 22:45:55,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:45:55,687 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 115 [2021-12-06 22:45:55,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:45:55,734 INFO L225 Difference]: With dead ends: 9935 [2021-12-06 22:45:55,734 INFO L226 Difference]: Without dead ends: 6775 [2021-12-06 22:45:55,751 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:45:55,752 INFO L933 BasicCegarLoop]: 2695 mSDtfsCounter, 4230 mSDsluCounter, 3665 mSDsCounter, 0 mSdLazyCounter, 3078 mSolverCounterSat, 2243 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4441 SdHoareTripleChecker+Valid, 6360 SdHoareTripleChecker+Invalid, 5321 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2243 IncrementalHoareTripleChecker+Valid, 3078 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:45:55,753 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4441 Valid, 6360 Invalid, 5321 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2243 Valid, 3078 Invalid, 0 Unknown, 0 Unchecked, 10.2s Time] [2021-12-06 22:45:55,759 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6775 states. [2021-12-06 22:45:55,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6775 to 6358. [2021-12-06 22:45:55,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6358 states, 4480 states have (on average 1.3830357142857144) internal successors, (6196), 4713 states have internal predecessors, (6196), 1463 states have call successors, (1463), 358 states have call predecessors, (1463), 414 states have return successors, (2241), 1395 states have call predecessors, (2241), 1458 states have call successors, (2241) [2021-12-06 22:45:56,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6358 states to 6358 states and 9900 transitions. [2021-12-06 22:45:56,010 INFO L78 Accepts]: Start accepts. Automaton has 6358 states and 9900 transitions. Word has length 115 [2021-12-06 22:45:56,011 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:45:56,011 INFO L470 AbstractCegarLoop]: Abstraction has 6358 states and 9900 transitions. [2021-12-06 22:45:56,011 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:45:56,011 INFO L276 IsEmpty]: Start isEmpty. Operand 6358 states and 9900 transitions. [2021-12-06 22:45:56,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-12-06 22:45:56,013 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:45:56,014 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:45:56,014 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 22:45:56,014 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:45:56,014 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:45:56,014 INFO L85 PathProgramCache]: Analyzing trace with hash -152489919, now seen corresponding path program 1 times [2021-12-06 22:45:56,014 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:45:56,015 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1305869056] [2021-12-06 22:45:56,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:45:56,015 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:45:56,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:45:56,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:56,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:56,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:45:56,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:56,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:56,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:45:56,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:56,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:56,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:45:56,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:56,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:45:56,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:45:56,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:56,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:45:56,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:45:56,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:45:56,282 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:45:56,283 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:45:56,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1305869056] [2021-12-06 22:45:56,283 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1305869056] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:45:56,283 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:45:56,283 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:45:56,283 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1488800389] [2021-12-06 22:45:56,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:45:56,284 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:45:56,284 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:45:56,285 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:45:56,285 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:45:56,285 INFO L87 Difference]: Start difference. First operand 6358 states and 9900 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:46:08,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:46:08,497 INFO L93 Difference]: Finished difference Result 6773 states and 10669 transitions. [2021-12-06 22:46:08,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:46:08,498 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 116 [2021-12-06 22:46:08,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:46:08,532 INFO L225 Difference]: With dead ends: 6773 [2021-12-06 22:46:08,533 INFO L226 Difference]: Without dead ends: 6770 [2021-12-06 22:46:08,535 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:46:08,536 INFO L933 BasicCegarLoop]: 2693 mSDtfsCounter, 4098 mSDsluCounter, 4619 mSDsCounter, 0 mSdLazyCounter, 4090 mSolverCounterSat, 2132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4310 SdHoareTripleChecker+Valid, 7312 SdHoareTripleChecker+Invalid, 6222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2132 IncrementalHoareTripleChecker+Valid, 4090 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:46:08,536 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4310 Valid, 7312 Invalid, 6222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2132 Valid, 4090 Invalid, 0 Unknown, 0 Unchecked, 12.0s Time] [2021-12-06 22:46:08,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6770 states. [2021-12-06 22:46:08,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6770 to 6359. [2021-12-06 22:46:08,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6359 states, 4481 states have (on average 1.3829502343226958) internal successors, (6197), 4714 states have internal predecessors, (6197), 1463 states have call successors, (1463), 358 states have call predecessors, (1463), 414 states have return successors, (2241), 1395 states have call predecessors, (2241), 1458 states have call successors, (2241) [2021-12-06 22:46:08,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6359 states to 6359 states and 9901 transitions. [2021-12-06 22:46:08,786 INFO L78 Accepts]: Start accepts. Automaton has 6359 states and 9901 transitions. Word has length 116 [2021-12-06 22:46:08,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:46:08,786 INFO L470 AbstractCegarLoop]: Abstraction has 6359 states and 9901 transitions. [2021-12-06 22:46:08,786 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:46:08,786 INFO L276 IsEmpty]: Start isEmpty. Operand 6359 states and 9901 transitions. [2021-12-06 22:46:08,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-12-06 22:46:08,789 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:46:08,789 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:46:08,789 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 22:46:08,789 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:46:08,789 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:46:08,789 INFO L85 PathProgramCache]: Analyzing trace with hash -432751076, now seen corresponding path program 1 times [2021-12-06 22:46:08,790 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:46:08,790 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807518643] [2021-12-06 22:46:08,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:46:08,790 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:46:08,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:46:08,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:08,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:08,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:46:08,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:08,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:08,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:46:08,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:08,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:08,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:46:08,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:08,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:08,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:08,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:09,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:46:09,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:09,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:09,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:09,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:46:09,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:09,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:09,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:09,045 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:46:09,045 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:46:09,046 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807518643] [2021-12-06 22:46:09,046 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807518643] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:46:09,046 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:46:09,046 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:46:09,046 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1040004912] [2021-12-06 22:46:09,046 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:46:09,047 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:46:09,047 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:46:09,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:46:09,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:46:09,048 INFO L87 Difference]: Start difference. First operand 6359 states and 9901 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:46:12,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:46:12,946 INFO L93 Difference]: Finished difference Result 6769 states and 10665 transitions. [2021-12-06 22:46:12,946 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:46:12,946 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 117 [2021-12-06 22:46:12,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:46:12,985 INFO L225 Difference]: With dead ends: 6769 [2021-12-06 22:46:12,985 INFO L226 Difference]: Without dead ends: 6766 [2021-12-06 22:46:12,987 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:46:12,988 INFO L933 BasicCegarLoop]: 2062 mSDtfsCounter, 3576 mSDsluCounter, 829 mSDsCounter, 0 mSdLazyCounter, 978 mSolverCounterSat, 1775 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3784 SdHoareTripleChecker+Valid, 2891 SdHoareTripleChecker+Invalid, 2753 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1775 IncrementalHoareTripleChecker+Valid, 978 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.7s IncrementalHoareTripleChecker+Time [2021-12-06 22:46:12,988 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3784 Valid, 2891 Invalid, 2753 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1775 Valid, 978 Invalid, 0 Unknown, 0 Unchecked, 3.7s Time] [2021-12-06 22:46:12,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6766 states. [2021-12-06 22:46:13,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6766 to 6358. [2021-12-06 22:46:13,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6358 states, 4481 states have (on average 1.3827270698504799) internal successors, (6196), 4713 states have internal predecessors, (6196), 1462 states have call successors, (1462), 358 states have call predecessors, (1462), 414 states have return successors, (2241), 1395 states have call predecessors, (2241), 1458 states have call successors, (2241) [2021-12-06 22:46:13,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6358 states to 6358 states and 9899 transitions. [2021-12-06 22:46:13,234 INFO L78 Accepts]: Start accepts. Automaton has 6358 states and 9899 transitions. Word has length 117 [2021-12-06 22:46:13,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:46:13,235 INFO L470 AbstractCegarLoop]: Abstraction has 6358 states and 9899 transitions. [2021-12-06 22:46:13,235 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:46:13,236 INFO L276 IsEmpty]: Start isEmpty. Operand 6358 states and 9899 transitions. [2021-12-06 22:46:13,238 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2021-12-06 22:46:13,238 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:46:13,238 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:46:13,238 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 22:46:13,238 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:46:13,238 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:46:13,239 INFO L85 PathProgramCache]: Analyzing trace with hash -530907484, now seen corresponding path program 1 times [2021-12-06 22:46:13,239 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:46:13,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [822138412] [2021-12-06 22:46:13,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:46:13,239 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:46:13,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:46:13,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:13,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:13,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:46:13,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:13,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:13,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:46:13,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:13,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:13,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:46:13,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:13,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:13,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:46:13,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:13,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:46:13,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:13,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:13,432 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-06 22:46:13,432 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:46:13,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [822138412] [2021-12-06 22:46:13,433 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [822138412] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:46:13,433 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:46:13,433 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:46:13,433 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [834305348] [2021-12-06 22:46:13,433 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:46:13,433 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:46:13,433 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:46:13,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:46:13,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:46:13,434 INFO L87 Difference]: Start difference. First operand 6358 states and 9899 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:46:21,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:46:21,847 INFO L93 Difference]: Finished difference Result 6768 states and 10663 transitions. [2021-12-06 22:46:21,848 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:46:21,848 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 118 [2021-12-06 22:46:21,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:46:21,877 INFO L225 Difference]: With dead ends: 6768 [2021-12-06 22:46:21,877 INFO L226 Difference]: Without dead ends: 6735 [2021-12-06 22:46:21,882 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:46:21,883 INFO L933 BasicCegarLoop]: 2056 mSDtfsCounter, 3002 mSDsluCounter, 2261 mSDsCounter, 0 mSdLazyCounter, 2300 mSolverCounterSat, 1261 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3210 SdHoareTripleChecker+Valid, 4317 SdHoareTripleChecker+Invalid, 3561 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1261 IncrementalHoareTripleChecker+Valid, 2300 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:46:21,883 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3210 Valid, 4317 Invalid, 3561 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1261 Valid, 2300 Invalid, 0 Unknown, 0 Unchecked, 8.2s Time] [2021-12-06 22:46:21,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6735 states. [2021-12-06 22:46:22,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6735 to 6327. [2021-12-06 22:46:22,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6327 states, 4464 states have (on average 1.38328853046595) internal successors, (6175), 4695 states have internal predecessors, (6175), 1449 states have call successors, (1449), 357 states have call predecessors, (1449), 413 states have return successors, (2205), 1383 states have call predecessors, (2205), 1446 states have call successors, (2205) [2021-12-06 22:46:22,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6327 states to 6327 states and 9829 transitions. [2021-12-06 22:46:22,118 INFO L78 Accepts]: Start accepts. Automaton has 6327 states and 9829 transitions. Word has length 118 [2021-12-06 22:46:22,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:46:22,118 INFO L470 AbstractCegarLoop]: Abstraction has 6327 states and 9829 transitions. [2021-12-06 22:46:22,118 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-06 22:46:22,118 INFO L276 IsEmpty]: Start isEmpty. Operand 6327 states and 9829 transitions. [2021-12-06 22:46:22,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 181 [2021-12-06 22:46:22,129 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:46:22,130 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:46:22,130 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 22:46:22,130 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:46:22,130 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:46:22,130 INFO L85 PathProgramCache]: Analyzing trace with hash 1173826115, now seen corresponding path program 1 times [2021-12-06 22:46:22,130 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:46:22,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [525253643] [2021-12-06 22:46:22,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:46:22,130 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:46:22,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:46:22,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:22,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:22,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:46:22,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:22,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:22,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:46:22,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:22,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:22,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:46:22,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:22,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:22,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:46:22,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:22,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:46:22,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:22,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2021-12-06 22:46:22,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-12-06 22:46:22,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-06 22:46:22,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 124 [2021-12-06 22:46:22,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-06 22:46:22,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-12-06 22:46:22,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:22,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:46:22,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:22,385 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2021-12-06 22:46:22,385 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:46:22,385 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [525253643] [2021-12-06 22:46:22,386 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [525253643] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:46:22,386 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:46:22,386 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 22:46:22,386 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1209670464] [2021-12-06 22:46:22,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:46:22,386 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 22:46:22,386 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:46:22,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 22:46:22,387 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:46:22,387 INFO L87 Difference]: Start difference. First operand 6327 states and 9829 transitions. Second operand has 8 states, 8 states have (on average 11.125) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 22:46:33,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:46:33,821 INFO L93 Difference]: Finished difference Result 19759 states and 31109 transitions. [2021-12-06 22:46:33,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 22:46:33,822 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.125) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 180 [2021-12-06 22:46:33,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:46:33,869 INFO L225 Difference]: With dead ends: 19759 [2021-12-06 22:46:33,869 INFO L226 Difference]: Without dead ends: 13455 [2021-12-06 22:46:33,896 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=70, Invalid=140, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:46:33,897 INFO L933 BasicCegarLoop]: 2265 mSDtfsCounter, 6375 mSDsluCounter, 4074 mSDsCounter, 0 mSdLazyCounter, 4786 mSolverCounterSat, 4891 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6690 SdHoareTripleChecker+Valid, 6339 SdHoareTripleChecker+Invalid, 9677 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4891 IncrementalHoareTripleChecker+Valid, 4786 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.9s IncrementalHoareTripleChecker+Time [2021-12-06 22:46:33,897 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6690 Valid, 6339 Invalid, 9677 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4891 Valid, 4786 Invalid, 0 Unknown, 0 Unchecked, 10.9s Time] [2021-12-06 22:46:33,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13455 states. [2021-12-06 22:46:34,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13455 to 12400. [2021-12-06 22:46:34,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12400 states, 8669 states have (on average 1.3753604798708041) internal successors, (11923), 9155 states have internal predecessors, (11923), 2778 states have call successors, (2778), 677 states have call predecessors, (2778), 952 states have return successors, (4680), 2835 states have call predecessors, (4680), 2775 states have call successors, (4680) [2021-12-06 22:46:34,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12400 states to 12400 states and 19381 transitions. [2021-12-06 22:46:34,381 INFO L78 Accepts]: Start accepts. Automaton has 12400 states and 19381 transitions. Word has length 180 [2021-12-06 22:46:34,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:46:34,381 INFO L470 AbstractCegarLoop]: Abstraction has 12400 states and 19381 transitions. [2021-12-06 22:46:34,381 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.125) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 22:46:34,381 INFO L276 IsEmpty]: Start isEmpty. Operand 12400 states and 19381 transitions. [2021-12-06 22:46:34,403 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 220 [2021-12-06 22:46:34,404 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:46:34,404 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:46:34,404 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 22:46:34,404 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:46:34,404 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:46:34,404 INFO L85 PathProgramCache]: Analyzing trace with hash 347877174, now seen corresponding path program 1 times [2021-12-06 22:46:34,404 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:46:34,404 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1727778698] [2021-12-06 22:46:34,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:46:34,405 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:46:34,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:46:34,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:34,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:34,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:46:34,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:34,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:34,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:46:34,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:34,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:34,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:46:34,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:34,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:34,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:46:34,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:34,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:46:34,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:34,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:46:34,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:34,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:34,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2021-12-06 22:46:34,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 149 [2021-12-06 22:46:34,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-06 22:46:34,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-12-06 22:46:34,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-12-06 22:46:34,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-06 22:46:34,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:34,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:46:34,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:34,708 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 170 trivial. 0 not checked. [2021-12-06 22:46:34,708 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:46:34,708 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1727778698] [2021-12-06 22:46:34,708 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1727778698] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:46:34,708 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:46:34,709 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 22:46:34,709 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1440198230] [2021-12-06 22:46:34,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:46:34,709 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 22:46:34,709 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:46:34,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 22:46:34,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:46:34,710 INFO L87 Difference]: Start difference. First operand 12400 states and 19381 transitions. Second operand has 9 states, 9 states have (on average 12.222222222222221) internal successors, (110), 4 states have internal predecessors, (110), 2 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 22:46:41,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:46:41,724 INFO L93 Difference]: Finished difference Result 28465 states and 45439 transitions. [2021-12-06 22:46:41,724 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 22:46:41,724 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 12.222222222222221) internal successors, (110), 4 states have internal predecessors, (110), 2 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 219 [2021-12-06 22:46:41,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:46:41,785 INFO L225 Difference]: With dead ends: 28465 [2021-12-06 22:46:41,785 INFO L226 Difference]: Without dead ends: 16088 [2021-12-06 22:46:41,832 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=173, Unknown=0, NotChecked=0, Total=240 [2021-12-06 22:46:41,833 INFO L933 BasicCegarLoop]: 2336 mSDtfsCounter, 5280 mSDsluCounter, 3811 mSDsCounter, 0 mSdLazyCounter, 2878 mSolverCounterSat, 3657 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5563 SdHoareTripleChecker+Valid, 6147 SdHoareTripleChecker+Invalid, 6535 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3657 IncrementalHoareTripleChecker+Valid, 2878 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.3s IncrementalHoareTripleChecker+Time [2021-12-06 22:46:41,833 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5563 Valid, 6147 Invalid, 6535 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3657 Valid, 2878 Invalid, 0 Unknown, 0 Unchecked, 6.3s Time] [2021-12-06 22:46:41,844 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16088 states. [2021-12-06 22:46:42,333 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16088 to 12414. [2021-12-06 22:46:42,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12414 states, 8683 states have (on average 1.3747552689162732) internal successors, (11937), 9169 states have internal predecessors, (11937), 2778 states have call successors, (2778), 677 states have call predecessors, (2778), 952 states have return successors, (4680), 2835 states have call predecessors, (4680), 2775 states have call successors, (4680) [2021-12-06 22:46:42,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12414 states to 12414 states and 19395 transitions. [2021-12-06 22:46:42,388 INFO L78 Accepts]: Start accepts. Automaton has 12414 states and 19395 transitions. Word has length 219 [2021-12-06 22:46:42,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:46:42,388 INFO L470 AbstractCegarLoop]: Abstraction has 12414 states and 19395 transitions. [2021-12-06 22:46:42,389 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 12.222222222222221) internal successors, (110), 4 states have internal predecessors, (110), 2 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 22:46:42,389 INFO L276 IsEmpty]: Start isEmpty. Operand 12414 states and 19395 transitions. [2021-12-06 22:46:42,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2021-12-06 22:46:42,408 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:46:42,408 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:46:42,408 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 22:46:42,409 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:46:42,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:46:42,409 INFO L85 PathProgramCache]: Analyzing trace with hash -2061198310, now seen corresponding path program 1 times [2021-12-06 22:46:42,409 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:46:42,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1417906979] [2021-12-06 22:46:42,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:46:42,409 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:46:42,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:46:42,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:42,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:42,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:46:42,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:42,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:42,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:46:42,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:42,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:42,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:46:42,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:42,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:42,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:46:42,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:42,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:46:42,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:42,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:46:42,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:42,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:42,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-12-06 22:46:42,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:42,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:42,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-12-06 22:46:42,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-12-06 22:46:42,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-06 22:46:42,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-06 22:46:42,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 185 [2021-12-06 22:46:42,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2021-12-06 22:46:42,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:42,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:46:42,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:42,739 INFO L134 CoverageAnalysis]: Checked inductivity of 260 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 239 trivial. 0 not checked. [2021-12-06 22:46:42,739 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:46:42,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1417906979] [2021-12-06 22:46:42,739 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1417906979] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:46:42,739 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:46:42,739 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-06 22:46:42,739 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1226156524] [2021-12-06 22:46:42,739 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:46:42,740 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-06 22:46:42,740 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:46:42,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-06 22:46:42,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:46:42,740 INFO L87 Difference]: Start difference. First operand 12414 states and 19395 transitions. Second operand has 8 states, 8 states have (on average 14.0) internal successors, (112), 3 states have internal predecessors, (112), 3 states have call successors, (20), 7 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 22:46:53,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:46:53,658 INFO L93 Difference]: Finished difference Result 38754 states and 61038 transitions. [2021-12-06 22:46:53,659 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 22:46:53,659 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 14.0) internal successors, (112), 3 states have internal predecessors, (112), 3 states have call successors, (20), 7 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) Word has length 236 [2021-12-06 22:46:53,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:46:53,757 INFO L225 Difference]: With dead ends: 38754 [2021-12-06 22:46:53,757 INFO L226 Difference]: Without dead ends: 26324 [2021-12-06 22:46:53,791 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=70, Invalid=140, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:46:53,791 INFO L933 BasicCegarLoop]: 3472 mSDtfsCounter, 4733 mSDsluCounter, 5359 mSDsCounter, 0 mSdLazyCounter, 4411 mSolverCounterSat, 3796 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5082 SdHoareTripleChecker+Valid, 8831 SdHoareTripleChecker+Invalid, 8207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3796 IncrementalHoareTripleChecker+Valid, 4411 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.9s IncrementalHoareTripleChecker+Time [2021-12-06 22:46:53,792 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5082 Valid, 8831 Invalid, 8207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3796 Valid, 4411 Invalid, 0 Unknown, 0 Unchecked, 9.9s Time] [2021-12-06 22:46:53,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26324 states. [2021-12-06 22:46:54,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26324 to 24277. [2021-12-06 22:46:54,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24277 states, 17015 states have (on average 1.375550984425507) internal successors, (23405), 17953 states have internal predecessors, (23405), 5394 states have call successors, (5394), 1328 states have call predecessors, (5394), 1867 states have return successors, (9045), 5493 states have call predecessors, (9045), 5391 states have call successors, (9045) [2021-12-06 22:46:54,816 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24277 states to 24277 states and 37844 transitions. [2021-12-06 22:46:54,820 INFO L78 Accepts]: Start accepts. Automaton has 24277 states and 37844 transitions. Word has length 236 [2021-12-06 22:46:54,820 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:46:54,820 INFO L470 AbstractCegarLoop]: Abstraction has 24277 states and 37844 transitions. [2021-12-06 22:46:54,820 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 14.0) internal successors, (112), 3 states have internal predecessors, (112), 3 states have call successors, (20), 7 states have call predecessors, (20), 1 states have return successors, (19), 2 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 22:46:54,820 INFO L276 IsEmpty]: Start isEmpty. Operand 24277 states and 37844 transitions. [2021-12-06 22:46:54,869 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 263 [2021-12-06 22:46:54,870 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:46:54,870 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:46:54,870 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 22:46:54,870 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:46:54,870 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:46:54,870 INFO L85 PathProgramCache]: Analyzing trace with hash -744424122, now seen corresponding path program 1 times [2021-12-06 22:46:54,870 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:46:54,871 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [222057800] [2021-12-06 22:46:54,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:46:54,871 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:46:54,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:54,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:46:54,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:54,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:54,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:54,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:54,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:54,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:46:54,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:54,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:54,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:54,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:54,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:54,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:46:54,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:54,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:54,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:54,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:54,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:46:55,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:55,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:55,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:46:55,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:55,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:46:55,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:55,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:46:55,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:55,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:46:55,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-06 22:46:55,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-12-06 22:46:55,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 143 [2021-12-06 22:46:55,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-12-06 22:46:55,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-12-06 22:46:55,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-06 22:46:55,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-06 22:46:55,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-12-06 22:46:55,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 201 [2021-12-06 22:46:55,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 206 [2021-12-06 22:46:55,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 211 [2021-12-06 22:46:55,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 216 [2021-12-06 22:46:55,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:46:55,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:46:55,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:46:55,172 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 199 trivial. 0 not checked. [2021-12-06 22:46:55,172 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:46:55,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [222057800] [2021-12-06 22:46:55,172 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [222057800] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:46:55,172 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:46:55,172 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-06 22:46:55,172 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [319906064] [2021-12-06 22:46:55,172 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:46:55,173 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-06 22:46:55,173 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:46:55,173 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-06 22:46:55,173 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-06 22:46:55,173 INFO L87 Difference]: Start difference. First operand 24277 states and 37844 transitions. Second operand has 9 states, 9 states have (on average 13.88888888888889) internal successors, (125), 3 states have internal predecessors, (125), 2 states have call successors, (25), 8 states have call predecessors, (25), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-12-06 22:46:59,718 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.03s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 22:47:03,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:47:03,059 INFO L93 Difference]: Finished difference Result 40772 states and 63558 transitions. [2021-12-06 22:47:03,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-06 22:47:03,059 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 13.88888888888889) internal successors, (125), 3 states have internal predecessors, (125), 2 states have call successors, (25), 8 states have call predecessors, (25), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 262 [2021-12-06 22:47:03,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:47:03,117 INFO L225 Difference]: With dead ends: 40772 [2021-12-06 22:47:03,117 INFO L226 Difference]: Without dead ends: 16526 [2021-12-06 22:47:03,176 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=57, Invalid=99, Unknown=0, NotChecked=0, Total=156 [2021-12-06 22:47:03,176 INFO L933 BasicCegarLoop]: 1983 mSDtfsCounter, 3035 mSDsluCounter, 3754 mSDsCounter, 0 mSdLazyCounter, 3110 mSolverCounterSat, 2774 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3116 SdHoareTripleChecker+Valid, 5737 SdHoareTripleChecker+Invalid, 5884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2774 IncrementalHoareTripleChecker+Valid, 3110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.9s IncrementalHoareTripleChecker+Time [2021-12-06 22:47:03,176 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3116 Valid, 5737 Invalid, 5884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2774 Valid, 3110 Invalid, 0 Unknown, 0 Unchecked, 6.9s Time] [2021-12-06 22:47:03,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16526 states. [2021-12-06 22:47:03,862 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16526 to 15060. [2021-12-06 22:47:03,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15060 states, 10533 states have (on average 1.371973796639134) internal successors, (14451), 11112 states have internal predecessors, (14451), 3355 states have call successors, (3355), 854 states have call predecessors, (3355), 1171 states have return successors, (5333), 3400 states have call predecessors, (5333), 3352 states have call successors, (5333) [2021-12-06 22:47:03,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15060 states to 15060 states and 23139 transitions. [2021-12-06 22:47:03,919 INFO L78 Accepts]: Start accepts. Automaton has 15060 states and 23139 transitions. Word has length 262 [2021-12-06 22:47:03,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:47:03,919 INFO L470 AbstractCegarLoop]: Abstraction has 15060 states and 23139 transitions. [2021-12-06 22:47:03,920 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 13.88888888888889) internal successors, (125), 3 states have internal predecessors, (125), 2 states have call successors, (25), 8 states have call predecessors, (25), 1 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-12-06 22:47:03,920 INFO L276 IsEmpty]: Start isEmpty. Operand 15060 states and 23139 transitions. [2021-12-06 22:47:03,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 277 [2021-12-06 22:47:03,944 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:47:03,944 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:47:03,944 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-06 22:47:03,944 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:47:03,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:47:03,944 INFO L85 PathProgramCache]: Analyzing trace with hash 656443316, now seen corresponding path program 1 times [2021-12-06 22:47:03,945 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:47:03,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [577803604] [2021-12-06 22:47:03,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:47:03,945 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:47:04,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:04,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:04,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:47:04,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:04,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:47:04,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:04,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:47:04,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:04,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:47:04,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:47:04,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-06 22:47:04,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:04,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:04,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:47:04,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:47:04,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:47:04,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:47:04,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:47:04,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:47:04,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:47:04,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:47:04,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-12-06 22:47:04,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-06 22:47:04,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-06 22:47:04,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-06 22:47:04,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2021-12-06 22:47:04,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:04,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:47:04,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 22:47:04,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:04,670 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2021-12-06 22:47:04,670 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:47:04,670 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [577803604] [2021-12-06 22:47:04,670 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [577803604] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:47:04,670 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:47:04,671 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2021-12-06 22:47:04,671 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [723736361] [2021-12-06 22:47:04,671 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:47:04,671 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-12-06 22:47:04,671 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:47:04,671 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-12-06 22:47:04,672 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=137, Unknown=0, NotChecked=0, Total=182 [2021-12-06 22:47:04,672 INFO L87 Difference]: Start difference. First operand 15060 states and 23139 transitions. Second operand has 14 states, 14 states have (on average 11.285714285714286) internal successors, (158), 4 states have internal predecessors, (158), 3 states have call successors, (33), 11 states have call predecessors, (33), 3 states have return successors, (32), 4 states have call predecessors, (32), 3 states have call successors, (32) [2021-12-06 22:47:14,552 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.03s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 22:47:20,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:47:20,740 INFO L93 Difference]: Finished difference Result 34300 states and 54929 transitions. [2021-12-06 22:47:20,741 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-06 22:47:20,741 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 11.285714285714286) internal successors, (158), 4 states have internal predecessors, (158), 3 states have call successors, (33), 11 states have call predecessors, (33), 3 states have return successors, (32), 4 states have call predecessors, (32), 3 states have call successors, (32) Word has length 276 [2021-12-06 22:47:20,742 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:47:20,813 INFO L225 Difference]: With dead ends: 34300 [2021-12-06 22:47:20,813 INFO L226 Difference]: Without dead ends: 19273 [2021-12-06 22:47:20,854 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 75 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=103, Invalid=239, Unknown=0, NotChecked=0, Total=342 [2021-12-06 22:47:20,854 INFO L933 BasicCegarLoop]: 2003 mSDtfsCounter, 3783 mSDsluCounter, 8462 mSDsCounter, 0 mSdLazyCounter, 6824 mSolverCounterSat, 3437 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3994 SdHoareTripleChecker+Valid, 10465 SdHoareTripleChecker+Invalid, 10261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3437 IncrementalHoareTripleChecker+Valid, 6824 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.8s IncrementalHoareTripleChecker+Time [2021-12-06 22:47:20,855 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3994 Valid, 10465 Invalid, 10261 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3437 Valid, 6824 Invalid, 0 Unknown, 0 Unchecked, 14.8s Time] [2021-12-06 22:47:20,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19273 states. [2021-12-06 22:47:21,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19273 to 17450. [2021-12-06 22:47:21,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17450 states, 12148 states have (on average 1.37355943365163) internal successors, (16686), 12847 states have internal predecessors, (16686), 3995 states have call successors, (3995), 854 states have call predecessors, (3995), 1306 states have return successors, (6714), 4135 states have call predecessors, (6714), 3992 states have call successors, (6714) [2021-12-06 22:47:21,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17450 states to 17450 states and 27395 transitions. [2021-12-06 22:47:21,756 INFO L78 Accepts]: Start accepts. Automaton has 17450 states and 27395 transitions. Word has length 276 [2021-12-06 22:47:21,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:47:21,757 INFO L470 AbstractCegarLoop]: Abstraction has 17450 states and 27395 transitions. [2021-12-06 22:47:21,757 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 11.285714285714286) internal successors, (158), 4 states have internal predecessors, (158), 3 states have call successors, (33), 11 states have call predecessors, (33), 3 states have return successors, (32), 4 states have call predecessors, (32), 3 states have call successors, (32) [2021-12-06 22:47:21,757 INFO L276 IsEmpty]: Start isEmpty. Operand 17450 states and 27395 transitions. [2021-12-06 22:47:21,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 282 [2021-12-06 22:47:21,782 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:47:21,783 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:47:21,783 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-06 22:47:21,783 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:47:21,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:47:21,783 INFO L85 PathProgramCache]: Analyzing trace with hash 1185868596, now seen corresponding path program 1 times [2021-12-06 22:47:21,783 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:47:21,783 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [212914064] [2021-12-06 22:47:21,784 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:47:21,784 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:47:21,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:21,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:21,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:21,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:21,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:21,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:21,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:21,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:47:21,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:21,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:21,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:21,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:21,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:47:22,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:22,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:22,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:47:22,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:22,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:22,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:47:22,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:22,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:47:22,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:22,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-12-06 22:47:22,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:22,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:22,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:47:22,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:47:22,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:47:22,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:47:22,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:22,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:47:22,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:47:22,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:47:22,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:22,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:22,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:22,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 22:47:22,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 22:47:22,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 22:47:22,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 22:47:22,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-06 22:47:22,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 124 [2021-12-06 22:47:22,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:22,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:22,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:47:22,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 22:47:22,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:22,295 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2021-12-06 22:47:22,295 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:47:22,295 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [212914064] [2021-12-06 22:47:22,295 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [212914064] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:47:22,296 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:47:22,296 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-06 22:47:22,296 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1455128117] [2021-12-06 22:47:22,296 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:47:22,296 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-06 22:47:22,296 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:47:22,297 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-06 22:47:22,297 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=91, Unknown=0, NotChecked=0, Total=132 [2021-12-06 22:47:22,297 INFO L87 Difference]: Start difference. First operand 17450 states and 27395 transitions. Second operand has 12 states, 12 states have (on average 13.166666666666666) internal successors, (158), 3 states have internal predecessors, (158), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:47:31,376 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.50s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 22:47:39,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:47:39,201 INFO L93 Difference]: Finished difference Result 36640 states and 57888 transitions. [2021-12-06 22:47:39,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-06 22:47:39,202 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 13.166666666666666) internal successors, (158), 3 states have internal predecessors, (158), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) Word has length 281 [2021-12-06 22:47:39,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:47:39,267 INFO L225 Difference]: With dead ends: 36640 [2021-12-06 22:47:39,267 INFO L226 Difference]: Without dead ends: 19223 [2021-12-06 22:47:39,313 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 67 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=117, Invalid=263, Unknown=0, NotChecked=0, Total=380 [2021-12-06 22:47:39,314 INFO L933 BasicCegarLoop]: 1995 mSDtfsCounter, 4484 mSDsluCounter, 4438 mSDsCounter, 0 mSdLazyCounter, 5376 mSolverCounterSat, 3097 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4744 SdHoareTripleChecker+Valid, 6433 SdHoareTripleChecker+Invalid, 8473 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3097 IncrementalHoareTripleChecker+Valid, 5376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.7s IncrementalHoareTripleChecker+Time [2021-12-06 22:47:39,314 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4744 Valid, 6433 Invalid, 8473 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3097 Valid, 5376 Invalid, 0 Unknown, 0 Unchecked, 15.7s Time] [2021-12-06 22:47:39,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19223 states. [2021-12-06 22:47:40,159 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19223 to 17430. [2021-12-06 22:47:40,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17430 states, 12138 states have (on average 1.3730433349810511) internal successors, (16666), 12837 states have internal predecessors, (16666), 3985 states have call successors, (3985), 854 states have call predecessors, (3985), 1306 states have return successors, (6651), 4125 states have call predecessors, (6651), 3982 states have call successors, (6651) [2021-12-06 22:47:40,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17430 states to 17430 states and 27302 transitions. [2021-12-06 22:47:40,236 INFO L78 Accepts]: Start accepts. Automaton has 17430 states and 27302 transitions. Word has length 281 [2021-12-06 22:47:40,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:47:40,236 INFO L470 AbstractCegarLoop]: Abstraction has 17430 states and 27302 transitions. [2021-12-06 22:47:40,236 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 13.166666666666666) internal successors, (158), 3 states have internal predecessors, (158), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:47:40,236 INFO L276 IsEmpty]: Start isEmpty. Operand 17430 states and 27302 transitions. [2021-12-06 22:47:40,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 284 [2021-12-06 22:47:40,287 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:47:40,288 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:47:40,288 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-12-06 22:47:40,288 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:47:40,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:47:40,288 INFO L85 PathProgramCache]: Analyzing trace with hash 1332308007, now seen corresponding path program 1 times [2021-12-06 22:47:40,288 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:47:40,288 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [140871511] [2021-12-06 22:47:40,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:47:40,289 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:47:40,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:40,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:40,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:47:40,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:40,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:47:40,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:40,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:47:40,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:40,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:47:40,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:47:40,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 22:47:40,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:40,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:40,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:47:40,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:47:40,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:47:40,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:47:40,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:47:40,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:47:40,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:47:40,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:40,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 22:47:40,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 22:47:40,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 22:47:40,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 22:47:40,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-06 22:47:40,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 124 [2021-12-06 22:47:40,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:40,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:47:40,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 22:47:40,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:40,736 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2021-12-06 22:47:40,736 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:47:40,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [140871511] [2021-12-06 22:47:40,736 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [140871511] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:47:40,736 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:47:40,736 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-06 22:47:40,737 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1538094357] [2021-12-06 22:47:40,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:47:40,737 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-06 22:47:40,737 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:47:40,737 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-06 22:47:40,737 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=91, Unknown=0, NotChecked=0, Total=132 [2021-12-06 22:47:40,738 INFO L87 Difference]: Start difference. First operand 17430 states and 27302 transitions. Second operand has 12 states, 12 states have (on average 13.333333333333334) internal successors, (160), 3 states have internal predecessors, (160), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:47:50,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:47:50,932 INFO L93 Difference]: Finished difference Result 36600 states and 57702 transitions. [2021-12-06 22:47:50,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-06 22:47:50,932 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 13.333333333333334) internal successors, (160), 3 states have internal predecessors, (160), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) Word has length 283 [2021-12-06 22:47:50,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:47:50,992 INFO L225 Difference]: With dead ends: 36600 [2021-12-06 22:47:50,992 INFO L226 Difference]: Without dead ends: 19203 [2021-12-06 22:47:51,034 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 67 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=117, Invalid=263, Unknown=0, NotChecked=0, Total=380 [2021-12-06 22:47:51,034 INFO L933 BasicCegarLoop]: 1983 mSDtfsCounter, 6255 mSDsluCounter, 2564 mSDsCounter, 0 mSdLazyCounter, 3116 mSolverCounterSat, 4944 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6517 SdHoareTripleChecker+Valid, 4547 SdHoareTripleChecker+Invalid, 8060 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4944 IncrementalHoareTripleChecker+Valid, 3116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:47:51,035 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6517 Valid, 4547 Invalid, 8060 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4944 Valid, 3116 Invalid, 0 Unknown, 0 Unchecked, 9.0s Time] [2021-12-06 22:47:51,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19203 states. [2021-12-06 22:47:51,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19203 to 17410. [2021-12-06 22:47:51,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17410 states, 12128 states have (on average 1.3725263852242744) internal successors, (16646), 12827 states have internal predecessors, (16646), 3975 states have call successors, (3975), 854 states have call predecessors, (3975), 1306 states have return successors, (6588), 4115 states have call predecessors, (6588), 3972 states have call successors, (6588) [2021-12-06 22:47:51,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17410 states to 17410 states and 27209 transitions. [2021-12-06 22:47:51,979 INFO L78 Accepts]: Start accepts. Automaton has 17410 states and 27209 transitions. Word has length 283 [2021-12-06 22:47:51,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:47:51,980 INFO L470 AbstractCegarLoop]: Abstraction has 17410 states and 27209 transitions. [2021-12-06 22:47:51,980 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 13.333333333333334) internal successors, (160), 3 states have internal predecessors, (160), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:47:51,980 INFO L276 IsEmpty]: Start isEmpty. Operand 17410 states and 27209 transitions. [2021-12-06 22:47:52,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 281 [2021-12-06 22:47:52,003 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:47:52,003 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:47:52,003 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-12-06 22:47:52,003 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:47:52,003 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:47:52,003 INFO L85 PathProgramCache]: Analyzing trace with hash 292936318, now seen corresponding path program 1 times [2021-12-06 22:47:52,003 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:47:52,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1645579146] [2021-12-06 22:47:52,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:47:52,004 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:47:52,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:52,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:52,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:47:52,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:52,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:47:52,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:52,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:47:52,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:52,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:47:52,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:47:52,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-06 22:47:52,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:52,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:47:52,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:47:52,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:47:52,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:47:52,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:47:52,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:47:52,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:47:52,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:47:52,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:47:52,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 22:47:52,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 22:47:52,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 22:47:52,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 22:47:52,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-06 22:47:52,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 124 [2021-12-06 22:47:52,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:47:52,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:47:52,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 22:47:52,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:47:52,462 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2021-12-06 22:47:52,462 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:47:52,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1645579146] [2021-12-06 22:47:52,463 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1645579146] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:47:52,463 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:47:52,463 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-06 22:47:52,463 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [922616300] [2021-12-06 22:47:52,463 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:47:52,464 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-06 22:47:52,464 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:47:52,464 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-06 22:47:52,464 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=91, Unknown=0, NotChecked=0, Total=132 [2021-12-06 22:47:52,464 INFO L87 Difference]: Start difference. First operand 17410 states and 27209 transitions. Second operand has 12 states, 12 states have (on average 13.083333333333334) internal successors, (157), 3 states have internal predecessors, (157), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:48:03,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:03,788 INFO L93 Difference]: Finished difference Result 36560 states and 57516 transitions. [2021-12-06 22:48:03,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-06 22:48:03,789 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 13.083333333333334) internal successors, (157), 3 states have internal predecessors, (157), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) Word has length 280 [2021-12-06 22:48:03,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:03,851 INFO L225 Difference]: With dead ends: 36560 [2021-12-06 22:48:03,851 INFO L226 Difference]: Without dead ends: 19183 [2021-12-06 22:48:03,891 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 67 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=117, Invalid=263, Unknown=0, NotChecked=0, Total=380 [2021-12-06 22:48:03,891 INFO L933 BasicCegarLoop]: 1984 mSDtfsCounter, 5383 mSDsluCounter, 3014 mSDsCounter, 0 mSdLazyCounter, 3442 mSolverCounterSat, 3924 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5640 SdHoareTripleChecker+Valid, 4998 SdHoareTripleChecker+Invalid, 7366 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3924 IncrementalHoareTripleChecker+Valid, 3442 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:03,891 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5640 Valid, 4998 Invalid, 7366 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3924 Valid, 3442 Invalid, 0 Unknown, 0 Unchecked, 10.1s Time] [2021-12-06 22:48:03,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19183 states. [2021-12-06 22:48:04,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19183 to 17390. [2021-12-06 22:48:04,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17390 states, 12118 states have (on average 1.3720085822743027) internal successors, (16626), 12817 states have internal predecessors, (16626), 3965 states have call successors, (3965), 854 states have call predecessors, (3965), 1306 states have return successors, (6525), 4105 states have call predecessors, (6525), 3962 states have call successors, (6525) [2021-12-06 22:48:04,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17390 states to 17390 states and 27116 transitions. [2021-12-06 22:48:04,882 INFO L78 Accepts]: Start accepts. Automaton has 17390 states and 27116 transitions. Word has length 280 [2021-12-06 22:48:04,882 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:04,882 INFO L470 AbstractCegarLoop]: Abstraction has 17390 states and 27116 transitions. [2021-12-06 22:48:04,882 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 13.083333333333334) internal successors, (157), 3 states have internal predecessors, (157), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:48:04,882 INFO L276 IsEmpty]: Start isEmpty. Operand 17390 states and 27116 transitions. [2021-12-06 22:48:04,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 283 [2021-12-06 22:48:04,905 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:04,905 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:04,905 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-12-06 22:48:04,905 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:04,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:04,905 INFO L85 PathProgramCache]: Analyzing trace with hash -1354792303, now seen corresponding path program 1 times [2021-12-06 22:48:04,905 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:04,906 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1745258535] [2021-12-06 22:48:04,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:04,906 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:05,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:05,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:05,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:05,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:05,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:05,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:05,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:05,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:05,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:05,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:48:05,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-06 22:48:05,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:05,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:05,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:48:05,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 22:48:05,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-06 22:48:05,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-06 22:48:05,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:48:05,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 22:48:05,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:05,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:05,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 22:48:05,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-06 22:48:05,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-06 22:48:05,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-06 22:48:05,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-06 22:48:05,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 124 [2021-12-06 22:48:05,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:05,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:48:05,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-06 22:48:05,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:05,372 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2021-12-06 22:48:05,372 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:05,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1745258535] [2021-12-06 22:48:05,372 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1745258535] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:48:05,372 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:48:05,372 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-06 22:48:05,372 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1778418600] [2021-12-06 22:48:05,372 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:48:05,373 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-06 22:48:05,373 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:05,373 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-06 22:48:05,373 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=91, Unknown=0, NotChecked=0, Total=132 [2021-12-06 22:48:05,373 INFO L87 Difference]: Start difference. First operand 17390 states and 27116 transitions. Second operand has 12 states, 12 states have (on average 13.25) internal successors, (159), 3 states have internal predecessors, (159), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:48:15,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:15,761 INFO L93 Difference]: Finished difference Result 36520 states and 57330 transitions. [2021-12-06 22:48:15,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-06 22:48:15,763 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 13.25) internal successors, (159), 3 states have internal predecessors, (159), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) Word has length 282 [2021-12-06 22:48:15,763 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:15,825 INFO L225 Difference]: With dead ends: 36520 [2021-12-06 22:48:15,825 INFO L226 Difference]: Without dead ends: 19163 [2021-12-06 22:48:15,865 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 79 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 67 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=117, Invalid=263, Unknown=0, NotChecked=0, Total=380 [2021-12-06 22:48:15,866 INFO L933 BasicCegarLoop]: 1983 mSDtfsCounter, 4366 mSDsluCounter, 3745 mSDsCounter, 0 mSdLazyCounter, 3812 mSolverCounterSat, 2990 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4629 SdHoareTripleChecker+Valid, 5728 SdHoareTripleChecker+Invalid, 6802 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2990 IncrementalHoareTripleChecker+Valid, 3812 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:15,866 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4629 Valid, 5728 Invalid, 6802 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2990 Valid, 3812 Invalid, 0 Unknown, 0 Unchecked, 9.1s Time] [2021-12-06 22:48:15,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19163 states. [2021-12-06 22:48:16,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19163 to 17370. [2021-12-06 22:48:16,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17370 states, 12108 states have (on average 1.3714899240171787) internal successors, (16606), 12807 states have internal predecessors, (16606), 3955 states have call successors, (3955), 854 states have call predecessors, (3955), 1306 states have return successors, (6462), 4095 states have call predecessors, (6462), 3952 states have call successors, (6462) [2021-12-06 22:48:16,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17370 states to 17370 states and 27023 transitions. [2021-12-06 22:48:16,858 INFO L78 Accepts]: Start accepts. Automaton has 17370 states and 27023 transitions. Word has length 282 [2021-12-06 22:48:16,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:16,858 INFO L470 AbstractCegarLoop]: Abstraction has 17370 states and 27023 transitions. [2021-12-06 22:48:16,858 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 13.25) internal successors, (159), 3 states have internal predecessors, (159), 2 states have call successors, (34), 11 states have call predecessors, (34), 1 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:48:16,858 INFO L276 IsEmpty]: Start isEmpty. Operand 17370 states and 27023 transitions. [2021-12-06 22:48:16,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-12-06 22:48:16,914 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:16,914 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:16,914 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-12-06 22:48:16,914 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:16,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:16,915 INFO L85 PathProgramCache]: Analyzing trace with hash 1659319806, now seen corresponding path program 1 times [2021-12-06 22:48:16,915 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:16,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1242569108] [2021-12-06 22:48:16,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:16,915 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:16,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:17,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:17,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:17,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:17,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:17,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:17,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:17,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:17,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:17,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:17,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:17,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:17,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:17,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:17,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:48:17,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:17,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:48:17,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:17,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:17,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-12-06 22:48:17,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:17,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:17,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-12-06 22:48:17,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-12-06 22:48:17,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-06 22:48:17,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-06 22:48:17,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 185 [2021-12-06 22:48:17,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2021-12-06 22:48:17,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:17,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:48:17,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-12-06 22:48:17,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2021-12-06 22:48:17,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-12-06 22:48:17,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 244 [2021-12-06 22:48:17,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-12-06 22:48:17,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 257 [2021-12-06 22:48:17,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-12-06 22:48:17,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2021-12-06 22:48:17,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-12-06 22:48:17,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2021-12-06 22:48:17,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-12-06 22:48:17,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 296 [2021-12-06 22:48:17,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,319 INFO L134 CoverageAnalysis]: Checked inductivity of 377 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 360 trivial. 0 not checked. [2021-12-06 22:48:17,319 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:17,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1242569108] [2021-12-06 22:48:17,319 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1242569108] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:48:17,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [33281957] [2021-12-06 22:48:17,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:17,319 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:48:17,320 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:48:17,321 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:48:17,322 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 22:48:17,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:17,832 INFO L263 TraceCheckSpWp]: Trace formula consists of 2988 conjuncts, 24 conjunts are in the unsatisfiable core [2021-12-06 22:48:17,846 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:48:18,479 INFO L134 CoverageAnalysis]: Checked inductivity of 377 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 358 trivial. 0 not checked. [2021-12-06 22:48:18,479 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:48:18,479 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [33281957] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:48:18,479 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 22:48:18,479 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [11] total 15 [2021-12-06 22:48:18,479 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [509375367] [2021-12-06 22:48:18,479 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:48:18,480 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:48:18,480 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:18,480 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:48:18,480 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=171, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:48:18,480 INFO L87 Difference]: Start difference. First operand 17370 states and 27023 transitions. Second operand has 6 states, 6 states have (on average 21.333333333333332) internal successors, (128), 4 states have internal predecessors, (128), 2 states have call successors, (32), 2 states have call predecessors, (32), 3 states have return successors, (31), 3 states have call predecessors, (31), 2 states have call successors, (31) [2021-12-06 22:48:21,512 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:21,512 INFO L93 Difference]: Finished difference Result 31093 states and 48663 transitions. [2021-12-06 22:48:21,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 22:48:21,513 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 21.333333333333332) internal successors, (128), 4 states have internal predecessors, (128), 2 states have call successors, (32), 2 states have call predecessors, (32), 3 states have return successors, (31), 3 states have call predecessors, (31), 2 states have call successors, (31) Word has length 311 [2021-12-06 22:48:21,513 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:21,564 INFO L225 Difference]: With dead ends: 31093 [2021-12-06 22:48:21,564 INFO L226 Difference]: Without dead ends: 17373 [2021-12-06 22:48:21,596 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 400 GetRequests, 387 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=171, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:48:21,596 INFO L933 BasicCegarLoop]: 2902 mSDtfsCounter, 2238 mSDsluCounter, 8398 mSDsCounter, 0 mSdLazyCounter, 2483 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2242 SdHoareTripleChecker+Valid, 11300 SdHoareTripleChecker+Invalid, 2485 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 2483 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:21,597 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2242 Valid, 11300 Invalid, 2485 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 2483 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2021-12-06 22:48:21,610 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17373 states. [2021-12-06 22:48:22,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17373 to 17370. [2021-12-06 22:48:22,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17370 states, 12108 states have (on average 1.3714899240171787) internal successors, (16606), 12807 states have internal predecessors, (16606), 3955 states have call successors, (3955), 854 states have call predecessors, (3955), 1306 states have return successors, (6460), 4095 states have call predecessors, (6460), 3952 states have call successors, (6460) [2021-12-06 22:48:22,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17370 states to 17370 states and 27021 transitions. [2021-12-06 22:48:22,529 INFO L78 Accepts]: Start accepts. Automaton has 17370 states and 27021 transitions. Word has length 311 [2021-12-06 22:48:22,530 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:22,530 INFO L470 AbstractCegarLoop]: Abstraction has 17370 states and 27021 transitions. [2021-12-06 22:48:22,530 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 21.333333333333332) internal successors, (128), 4 states have internal predecessors, (128), 2 states have call successors, (32), 2 states have call predecessors, (32), 3 states have return successors, (31), 3 states have call predecessors, (31), 2 states have call successors, (31) [2021-12-06 22:48:22,530 INFO L276 IsEmpty]: Start isEmpty. Operand 17370 states and 27021 transitions. [2021-12-06 22:48:22,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 318 [2021-12-06 22:48:22,553 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:22,553 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:22,578 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 22:48:22,754 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2021-12-06 22:48:22,755 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:22,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:22,757 INFO L85 PathProgramCache]: Analyzing trace with hash -1133870207, now seen corresponding path program 1 times [2021-12-06 22:48:22,757 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:22,757 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1005159432] [2021-12-06 22:48:22,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:22,758 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:22,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:22,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:22,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:22,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:22,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:22,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:22,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:22,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:22,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:22,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:22,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:22,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:22,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:22,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:22,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:22,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-06 22:48:23,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:23,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-06 22:48:23,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:23,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:23,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-12-06 22:48:23,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:23,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:23,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-12-06 22:48:23,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:23,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 172 [2021-12-06 22:48:23,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-06 22:48:23,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 186 [2021-12-06 22:48:23,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-12-06 22:48:23,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 196 [2021-12-06 22:48:23,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:23,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:48:23,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 233 [2021-12-06 22:48:23,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 237 [2021-12-06 22:48:23,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 246 [2021-12-06 22:48:23,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 250 [2021-12-06 22:48:23,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 259 [2021-12-06 22:48:23,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 263 [2021-12-06 22:48:23,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 272 [2021-12-06 22:48:23,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 276 [2021-12-06 22:48:23,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 285 [2021-12-06 22:48:23,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 289 [2021-12-06 22:48:23,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 298 [2021-12-06 22:48:23,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 302 [2021-12-06 22:48:23,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,173 INFO L134 CoverageAnalysis]: Checked inductivity of 401 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 394 trivial. 0 not checked. [2021-12-06 22:48:23,173 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:23,173 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1005159432] [2021-12-06 22:48:23,173 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1005159432] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:48:23,173 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [965395383] [2021-12-06 22:48:23,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:23,173 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:48:23,174 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:48:23,174 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:48:23,176 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-06 22:48:23,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:23,774 INFO L263 TraceCheckSpWp]: Trace formula consists of 3014 conjuncts, 20 conjunts are in the unsatisfiable core [2021-12-06 22:48:23,781 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:48:24,251 INFO L134 CoverageAnalysis]: Checked inductivity of 401 backedges. 137 proven. 0 refuted. 0 times theorem prover too weak. 264 trivial. 0 not checked. [2021-12-06 22:48:24,251 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:48:24,251 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [965395383] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:48:24,252 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-06 22:48:24,252 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [12] total 17 [2021-12-06 22:48:24,252 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1764941750] [2021-12-06 22:48:24,252 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:48:24,252 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 22:48:24,252 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:24,253 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 22:48:24,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=227, Unknown=0, NotChecked=0, Total=272 [2021-12-06 22:48:24,253 INFO L87 Difference]: Start difference. First operand 17370 states and 27021 transitions. Second operand has 7 states, 6 states have (on average 22.0) internal successors, (132), 6 states have internal predecessors, (132), 3 states have call successors, (36), 2 states have call predecessors, (36), 4 states have return successors, (35), 3 states have call predecessors, (35), 3 states have call successors, (35) [2021-12-06 22:48:27,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:27,913 INFO L93 Difference]: Finished difference Result 34742 states and 54064 transitions. [2021-12-06 22:48:27,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 22:48:27,914 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 22.0) internal successors, (132), 6 states have internal predecessors, (132), 3 states have call successors, (36), 2 states have call predecessors, (36), 4 states have return successors, (35), 3 states have call predecessors, (35), 3 states have call successors, (35) Word has length 317 [2021-12-06 22:48:27,914 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:27,967 INFO L225 Difference]: With dead ends: 34742 [2021-12-06 22:48:27,967 INFO L226 Difference]: Without dead ends: 17391 [2021-12-06 22:48:28,007 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 408 GetRequests, 391 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 58 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=283, Unknown=0, NotChecked=0, Total=342 [2021-12-06 22:48:28,008 INFO L933 BasicCegarLoop]: 2896 mSDtfsCounter, 2294 mSDsluCounter, 9326 mSDsCounter, 0 mSdLazyCounter, 3295 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2302 SdHoareTripleChecker+Valid, 12222 SdHoareTripleChecker+Invalid, 3299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3295 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:28,008 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2302 Valid, 12222 Invalid, 3299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3295 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2021-12-06 22:48:28,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17391 states. [2021-12-06 22:48:28,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17391 to 17373. [2021-12-06 22:48:28,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17373 states, 12110 states have (on average 1.371511147811726) internal successors, (16609), 12810 states have internal predecessors, (16609), 3955 states have call successors, (3955), 854 states have call predecessors, (3955), 1307 states have return successors, (6464), 4095 states have call predecessors, (6464), 3952 states have call successors, (6464) [2021-12-06 22:48:28,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17373 states to 17373 states and 27028 transitions. [2021-12-06 22:48:28,958 INFO L78 Accepts]: Start accepts. Automaton has 17373 states and 27028 transitions. Word has length 317 [2021-12-06 22:48:28,958 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:28,959 INFO L470 AbstractCegarLoop]: Abstraction has 17373 states and 27028 transitions. [2021-12-06 22:48:28,959 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 22.0) internal successors, (132), 6 states have internal predecessors, (132), 3 states have call successors, (36), 2 states have call predecessors, (36), 4 states have return successors, (35), 3 states have call predecessors, (35), 3 states have call successors, (35) [2021-12-06 22:48:28,959 INFO L276 IsEmpty]: Start isEmpty. Operand 17373 states and 27028 transitions. [2021-12-06 22:48:28,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 320 [2021-12-06 22:48:28,982 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:28,982 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:29,007 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-06 22:48:29,183 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2021-12-06 22:48:29,184 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:29,185 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:29,185 INFO L85 PathProgramCache]: Analyzing trace with hash -1076580609, now seen corresponding path program 1 times [2021-12-06 22:48:29,185 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:29,186 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1638195003] [2021-12-06 22:48:29,186 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:29,186 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:29,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:29,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:29,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:29,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:29,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:29,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:29,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:29,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:29,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:29,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-06 22:48:29,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-06 22:48:29,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:29,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-12-06 22:48:29,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:29,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-12-06 22:48:29,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:29,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2021-12-06 22:48:29,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-06 22:48:29,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-12-06 22:48:29,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 193 [2021-12-06 22:48:29,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 198 [2021-12-06 22:48:29,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:29,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:48:29,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 235 [2021-12-06 22:48:29,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 239 [2021-12-06 22:48:29,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 248 [2021-12-06 22:48:29,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 252 [2021-12-06 22:48:29,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 261 [2021-12-06 22:48:29,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2021-12-06 22:48:29,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 274 [2021-12-06 22:48:29,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 278 [2021-12-06 22:48:29,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 287 [2021-12-06 22:48:29,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 291 [2021-12-06 22:48:29,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 300 [2021-12-06 22:48:29,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 304 [2021-12-06 22:48:29,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:29,652 INFO L134 CoverageAnalysis]: Checked inductivity of 406 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 395 trivial. 0 not checked. [2021-12-06 22:48:29,652 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:29,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1638195003] [2021-12-06 22:48:29,652 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1638195003] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:48:29,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1980069306] [2021-12-06 22:48:29,652 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:29,652 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:48:29,652 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:48:29,653 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:48:29,654 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-06 22:48:30,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:30,280 INFO L263 TraceCheckSpWp]: Trace formula consists of 3044 conjuncts, 12 conjunts are in the unsatisfiable core [2021-12-06 22:48:30,285 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:48:30,677 INFO L134 CoverageAnalysis]: Checked inductivity of 406 backedges. 140 proven. 1 refuted. 0 times theorem prover too weak. 265 trivial. 0 not checked. [2021-12-06 22:48:30,677 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:48:31,217 INFO L134 CoverageAnalysis]: Checked inductivity of 406 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 395 trivial. 0 not checked. [2021-12-06 22:48:31,217 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1980069306] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:48:31,217 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:48:31,217 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 7, 7] total 19 [2021-12-06 22:48:31,218 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1874900804] [2021-12-06 22:48:31,218 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:48:31,218 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2021-12-06 22:48:31,218 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:31,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2021-12-06 22:48:31,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=291, Unknown=0, NotChecked=0, Total=342 [2021-12-06 22:48:31,219 INFO L87 Difference]: Start difference. First operand 17373 states and 27028 transitions. Second operand has 19 states, 17 states have (on average 10.823529411764707) internal successors, (184), 13 states have internal predecessors, (184), 4 states have call successors, (82), 8 states have call predecessors, (82), 6 states have return successors, (63), 4 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 22:48:53,675 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:48:53,675 INFO L93 Difference]: Finished difference Result 36284 states and 56919 transitions. [2021-12-06 22:48:53,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-12-06 22:48:53,677 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 17 states have (on average 10.823529411764707) internal successors, (184), 13 states have internal predecessors, (184), 4 states have call successors, (82), 8 states have call predecessors, (82), 6 states have return successors, (63), 4 states have call predecessors, (63), 4 states have call successors, (63) Word has length 319 [2021-12-06 22:48:53,677 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:48:53,739 INFO L225 Difference]: With dead ends: 36284 [2021-12-06 22:48:53,739 INFO L226 Difference]: Without dead ends: 18930 [2021-12-06 22:48:53,781 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 738 GetRequests, 709 SyntacticMatches, 2 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 158 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=142, Invalid=670, Unknown=0, NotChecked=0, Total=812 [2021-12-06 22:48:53,782 INFO L933 BasicCegarLoop]: 1974 mSDtfsCounter, 2440 mSDsluCounter, 15222 mSDsCounter, 0 mSdLazyCounter, 11277 mSolverCounterSat, 2195 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2524 SdHoareTripleChecker+Valid, 17196 SdHoareTripleChecker+Invalid, 13472 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2195 IncrementalHoareTripleChecker+Valid, 11277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.9s IncrementalHoareTripleChecker+Time [2021-12-06 22:48:53,782 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2524 Valid, 17196 Invalid, 13472 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2195 Valid, 11277 Invalid, 0 Unknown, 0 Unchecked, 20.9s Time] [2021-12-06 22:48:53,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18930 states. [2021-12-06 22:48:54,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18930 to 17374. [2021-12-06 22:48:54,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17374 states, 12111 states have (on average 1.3715630418627693) internal successors, (16611), 12811 states have internal predecessors, (16611), 3955 states have call successors, (3955), 854 states have call predecessors, (3955), 1307 states have return successors, (6464), 4095 states have call predecessors, (6464), 3952 states have call successors, (6464) [2021-12-06 22:48:54,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17374 states to 17374 states and 27030 transitions. [2021-12-06 22:48:54,799 INFO L78 Accepts]: Start accepts. Automaton has 17374 states and 27030 transitions. Word has length 319 [2021-12-06 22:48:54,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:48:54,800 INFO L470 AbstractCegarLoop]: Abstraction has 17374 states and 27030 transitions. [2021-12-06 22:48:54,800 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 17 states have (on average 10.823529411764707) internal successors, (184), 13 states have internal predecessors, (184), 4 states have call successors, (82), 8 states have call predecessors, (82), 6 states have return successors, (63), 4 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 22:48:54,800 INFO L276 IsEmpty]: Start isEmpty. Operand 17374 states and 27030 transitions. [2021-12-06 22:48:54,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 322 [2021-12-06 22:48:54,823 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:48:54,823 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:48:54,847 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-12-06 22:48:55,024 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2021-12-06 22:48:55,025 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:48:55,025 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:48:55,026 INFO L85 PathProgramCache]: Analyzing trace with hash 1421533825, now seen corresponding path program 2 times [2021-12-06 22:48:55,026 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:48:55,027 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [489445102] [2021-12-06 22:48:55,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:48:55,028 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:48:55,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:55,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:55,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:55,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:48:55,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:55,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:55,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:48:55,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:55,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:55,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:48:55,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:55,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:55,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:48:55,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:55,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-06 22:48:55,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:55,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-06 22:48:55,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:55,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:55,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-12-06 22:48:55,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:55,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:48:55,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-12-06 22:48:55,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:48:55,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-12-06 22:48:55,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 185 [2021-12-06 22:48:55,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2021-12-06 22:48:55,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 195 [2021-12-06 22:48:55,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2021-12-06 22:48:55,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:48:55,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:48:55,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 237 [2021-12-06 22:48:55,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 241 [2021-12-06 22:48:55,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 250 [2021-12-06 22:48:55,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 254 [2021-12-06 22:48:55,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 263 [2021-12-06 22:48:55,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 267 [2021-12-06 22:48:55,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 276 [2021-12-06 22:48:55,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 280 [2021-12-06 22:48:55,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 289 [2021-12-06 22:48:55,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 293 [2021-12-06 22:48:55,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 302 [2021-12-06 22:48:55,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 306 [2021-12-06 22:48:55,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:48:55,470 INFO L134 CoverageAnalysis]: Checked inductivity of 415 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 397 trivial. 0 not checked. [2021-12-06 22:48:55,470 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:48:55,470 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [489445102] [2021-12-06 22:48:55,471 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [489445102] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:48:55,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1605197179] [2021-12-06 22:48:55,471 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 22:48:55,471 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:48:55,471 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:48:55,471 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:48:55,472 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-06 22:48:56,407 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-12-06 22:48:56,407 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:48:56,419 INFO L263 TraceCheckSpWp]: Trace formula consists of 3074 conjuncts, 19 conjunts are in the unsatisfiable core [2021-12-06 22:48:56,425 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:48:56,728 INFO L134 CoverageAnalysis]: Checked inductivity of 415 backedges. 142 proven. 3 refuted. 0 times theorem prover too weak. 270 trivial. 0 not checked. [2021-12-06 22:48:56,728 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:48:57,215 INFO L134 CoverageAnalysis]: Checked inductivity of 415 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 397 trivial. 0 not checked. [2021-12-06 22:48:57,215 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1605197179] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:48:57,215 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:48:57,216 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 8] total 22 [2021-12-06 22:48:57,216 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1260266152] [2021-12-06 22:48:57,216 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:48:57,217 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-12-06 22:48:57,217 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:48:57,217 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-12-06 22:48:57,217 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2021-12-06 22:48:57,217 INFO L87 Difference]: Start difference. First operand 17374 states and 27030 transitions. Second operand has 22 states, 20 states have (on average 9.05) internal successors, (181), 16 states have internal predecessors, (181), 4 states have call successors, (80), 8 states have call predecessors, (80), 6 states have return successors, (64), 4 states have call predecessors, (64), 4 states have call successors, (64) [2021-12-06 22:49:22,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:49:22,019 INFO L93 Difference]: Finished difference Result 36315 states and 57031 transitions. [2021-12-06 22:49:22,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-12-06 22:49:22,020 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 20 states have (on average 9.05) internal successors, (181), 16 states have internal predecessors, (181), 4 states have call successors, (80), 8 states have call predecessors, (80), 6 states have return successors, (64), 4 states have call predecessors, (64), 4 states have call successors, (64) Word has length 321 [2021-12-06 22:49:22,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:49:22,085 INFO L225 Difference]: With dead ends: 36315 [2021-12-06 22:49:22,085 INFO L226 Difference]: Without dead ends: 18960 [2021-12-06 22:49:22,131 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 745 GetRequests, 711 SyntacticMatches, 2 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 203 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=187, Invalid=935, Unknown=0, NotChecked=0, Total=1122 [2021-12-06 22:49:22,132 INFO L933 BasicCegarLoop]: 1972 mSDtfsCounter, 2106 mSDsluCounter, 14834 mSDsCounter, 0 mSdLazyCounter, 12092 mSolverCounterSat, 1850 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 20.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2189 SdHoareTripleChecker+Valid, 16806 SdHoareTripleChecker+Invalid, 13942 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1850 IncrementalHoareTripleChecker+Valid, 12092 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 23.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:49:22,132 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2189 Valid, 16806 Invalid, 13942 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1850 Valid, 12092 Invalid, 0 Unknown, 0 Unchecked, 23.2s Time] [2021-12-06 22:49:22,147 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18960 states. [2021-12-06 22:49:23,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18960 to 17375. [2021-12-06 22:49:23,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17375 states, 12112 states have (on average 1.371614927344782) internal successors, (16613), 12812 states have internal predecessors, (16613), 3955 states have call successors, (3955), 854 states have call predecessors, (3955), 1307 states have return successors, (6464), 4095 states have call predecessors, (6464), 3952 states have call successors, (6464) [2021-12-06 22:49:23,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17375 states to 17375 states and 27032 transitions. [2021-12-06 22:49:23,149 INFO L78 Accepts]: Start accepts. Automaton has 17375 states and 27032 transitions. Word has length 321 [2021-12-06 22:49:23,149 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:49:23,150 INFO L470 AbstractCegarLoop]: Abstraction has 17375 states and 27032 transitions. [2021-12-06 22:49:23,150 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 20 states have (on average 9.05) internal successors, (181), 16 states have internal predecessors, (181), 4 states have call successors, (80), 8 states have call predecessors, (80), 6 states have return successors, (64), 4 states have call predecessors, (64), 4 states have call successors, (64) [2021-12-06 22:49:23,150 INFO L276 IsEmpty]: Start isEmpty. Operand 17375 states and 27032 transitions. [2021-12-06 22:49:23,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 324 [2021-12-06 22:49:23,173 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:49:23,173 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:49:23,197 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2021-12-06 22:49:23,373 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:49:23,375 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:49:23,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:49:23,376 INFO L85 PathProgramCache]: Analyzing trace with hash -257474945, now seen corresponding path program 3 times [2021-12-06 22:49:23,376 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:49:23,376 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [9990857] [2021-12-06 22:49:23,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:49:23,377 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:49:23,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:49:23,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:23,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:23,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-06 22:49:23,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:23,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:23,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-06 22:49:23,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:23,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:23,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-06 22:49:23,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:23,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:23,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-06 22:49:23,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:23,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-06 22:49:23,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:23,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-06 22:49:23,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:23,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:23,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2021-12-06 22:49:23,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:23,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-06 22:49:23,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-06 22:49:23,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 22:49:23,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-06 22:49:23,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 187 [2021-12-06 22:49:23,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-12-06 22:49:23,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 197 [2021-12-06 22:49:23,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-12-06 22:49:23,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 22:49:23,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 22:49:23,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 239 [2021-12-06 22:49:23,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-12-06 22:49:23,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 252 [2021-12-06 22:49:23,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-12-06 22:49:23,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2021-12-06 22:49:23,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-12-06 22:49:23,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 278 [2021-12-06 22:49:23,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-12-06 22:49:23,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 291 [2021-12-06 22:49:23,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 295 [2021-12-06 22:49:23,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 304 [2021-12-06 22:49:23,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 308 [2021-12-06 22:49:23,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:49:23,835 INFO L134 CoverageAnalysis]: Checked inductivity of 428 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 400 trivial. 0 not checked. [2021-12-06 22:49:23,835 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 22:49:23,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [9990857] [2021-12-06 22:49:23,835 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [9990857] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 22:49:23,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [515019095] [2021-12-06 22:49:23,835 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2021-12-06 22:49:23,835 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:49:23,835 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:49:23,836 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 22:49:23,837 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-12-06 22:49:25,531 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2021-12-06 22:49:25,531 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:49:25,545 INFO L263 TraceCheckSpWp]: Trace formula consists of 3017 conjuncts, 16 conjunts are in the unsatisfiable core [2021-12-06 22:49:25,551 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:49:25,973 INFO L134 CoverageAnalysis]: Checked inductivity of 428 backedges. 150 proven. 6 refuted. 0 times theorem prover too weak. 272 trivial. 0 not checked. [2021-12-06 22:49:25,973 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:49:26,684 INFO L134 CoverageAnalysis]: Checked inductivity of 428 backedges. 22 proven. 6 refuted. 0 times theorem prover too weak. 400 trivial. 0 not checked. [2021-12-06 22:49:26,684 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [515019095] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:49:26,685 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 22:49:26,685 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9, 9] total 25 [2021-12-06 22:49:26,685 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [68687086] [2021-12-06 22:49:26,685 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 22:49:26,686 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2021-12-06 22:49:26,687 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 22:49:26,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2021-12-06 22:49:26,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=529, Unknown=0, NotChecked=0, Total=600 [2021-12-06 22:49:26,687 INFO L87 Difference]: Start difference. First operand 17375 states and 27032 transitions. Second operand has 25 states, 23 states have (on average 8.0) internal successors, (184), 19 states have internal predecessors, (184), 4 states have call successors, (80), 8 states have call predecessors, (80), 6 states have return successors, (63), 4 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 22:49:35,983 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.03s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-12-06 22:50:03,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:50:03,547 INFO L93 Difference]: Finished difference Result 36346 states and 57143 transitions. [2021-12-06 22:50:03,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-06 22:50:03,548 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 23 states have (on average 8.0) internal successors, (184), 19 states have internal predecessors, (184), 4 states have call successors, (80), 8 states have call predecessors, (80), 6 states have return successors, (63), 4 states have call predecessors, (63), 4 states have call successors, (63) Word has length 323 [2021-12-06 22:50:03,548 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:50:03,607 INFO L225 Difference]: With dead ends: 36346 [2021-12-06 22:50:03,607 INFO L226 Difference]: Without dead ends: 18990 [2021-12-06 22:50:03,646 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 753 GetRequests, 713 SyntacticMatches, 2 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 298 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=225, Invalid=1335, Unknown=0, NotChecked=0, Total=1560 [2021-12-06 22:50:03,647 INFO L933 BasicCegarLoop]: 1965 mSDtfsCounter, 2103 mSDsluCounter, 24884 mSDsCounter, 0 mSdLazyCounter, 18937 mSolverCounterSat, 1869 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 30.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2189 SdHoareTripleChecker+Valid, 26849 SdHoareTripleChecker+Invalid, 20806 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1869 IncrementalHoareTripleChecker+Valid, 18937 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 34.9s IncrementalHoareTripleChecker+Time [2021-12-06 22:50:03,648 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2189 Valid, 26849 Invalid, 20806 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1869 Valid, 18937 Invalid, 0 Unknown, 0 Unchecked, 34.9s Time] [2021-12-06 22:50:03,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18990 states. [2021-12-06 22:50:04,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18990 to 17376. [2021-12-06 22:50:04,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17376 states, 12113 states have (on average 1.371666804259886) internal successors, (16615), 12813 states have internal predecessors, (16615), 3955 states have call successors, (3955), 854 states have call predecessors, (3955), 1307 states have return successors, (6464), 4095 states have call predecessors, (6464), 3952 states have call successors, (6464) [2021-12-06 22:50:04,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17376 states to 17376 states and 27034 transitions. [2021-12-06 22:50:04,669 INFO L78 Accepts]: Start accepts. Automaton has 17376 states and 27034 transitions. Word has length 323 [2021-12-06 22:50:04,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:50:04,670 INFO L470 AbstractCegarLoop]: Abstraction has 17376 states and 27034 transitions. [2021-12-06 22:50:04,670 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 23 states have (on average 8.0) internal successors, (184), 19 states have internal predecessors, (184), 4 states have call successors, (80), 8 states have call predecessors, (80), 6 states have return successors, (63), 4 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-06 22:50:04,670 INFO L276 IsEmpty]: Start isEmpty. Operand 17376 states and 27034 transitions. [2021-12-06 22:50:04,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 326 [2021-12-06 22:50:04,694 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:04,694 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:04,720 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-12-06 22:50:04,895 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 22:50:04,896 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:04,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:04,897 INFO L85 PathProgramCache]: Analyzing trace with hash -1815629439, now seen corresponding path program 4 times [2021-12-06 22:50:04,897 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 22:50:04,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [132464692] [2021-12-06 22:50:04,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:04,898 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 22:50:05,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 22:50:05,457 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 22:50:05,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 22:50:06,099 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-06 22:50:06,099 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 22:50:06,100 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 22:50:06,101 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2021-12-06 22:50:06,103 INFO L732 BasicCegarLoop]: Path program histogram: [4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:06,106 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 22:50:06,168 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 22:50:06,171 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 22:50:06,539 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 10:50:06 BoogieIcfgContainer [2021-12-06 22:50:06,539 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 22:50:06,540 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 22:50:06,540 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 22:50:06,540 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 22:50:06,540 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:45:25" (3/4) ... [2021-12-06 22:50:06,542 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 22:50:06,542 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 22:50:06,543 INFO L158 Benchmark]: Toolchain (without parser) took 287150.13ms. Allocated memory was 100.7MB in the beginning and 2.5GB in the end (delta: 2.4GB). Free memory was 73.0MB in the beginning and 321.6MB in the end (delta: -248.7MB). Peak memory consumption was 2.1GB. Max. memory is 16.1GB. [2021-12-06 22:50:06,543 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 100.7MB. Free memory was 80.6MB in the beginning and 80.5MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:50:06,543 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1629.19ms. Allocated memory was 100.7MB in the beginning and 132.1MB in the end (delta: 31.5MB). Free memory was 72.7MB in the beginning and 65.2MB in the end (delta: 7.4MB). Peak memory consumption was 66.4MB. Max. memory is 16.1GB. [2021-12-06 22:50:06,544 INFO L158 Benchmark]: Boogie Procedure Inliner took 197.48ms. Allocated memory is still 132.1MB. Free memory was 65.2MB in the beginning and 63.6MB in the end (delta: 1.7MB). Peak memory consumption was 32.4MB. Max. memory is 16.1GB. [2021-12-06 22:50:06,544 INFO L158 Benchmark]: Boogie Preprocessor took 189.90ms. Allocated memory was 132.1MB in the beginning and 159.4MB in the end (delta: 27.3MB). Free memory was 63.6MB in the beginning and 79.9MB in the end (delta: -16.3MB). Peak memory consumption was 35.4MB. Max. memory is 16.1GB. [2021-12-06 22:50:06,544 INFO L158 Benchmark]: RCFGBuilder took 4381.55ms. Allocated memory was 159.4MB in the beginning and 224.4MB in the end (delta: 65.0MB). Free memory was 79.9MB in the beginning and 91.6MB in the end (delta: -11.8MB). Peak memory consumption was 92.9MB. Max. memory is 16.1GB. [2021-12-06 22:50:06,544 INFO L158 Benchmark]: TraceAbstraction took 280741.72ms. Allocated memory was 224.4MB in the beginning and 2.5GB in the end (delta: 2.3GB). Free memory was 91.6MB in the beginning and 322.7MB in the end (delta: -231.1MB). Peak memory consumption was 2.1GB. Max. memory is 16.1GB. [2021-12-06 22:50:06,545 INFO L158 Benchmark]: Witness Printer took 2.63ms. Allocated memory is still 2.5GB. Free memory was 322.7MB in the beginning and 321.6MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:50:06,546 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 100.7MB. Free memory was 80.6MB in the beginning and 80.5MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1629.19ms. Allocated memory was 100.7MB in the beginning and 132.1MB in the end (delta: 31.5MB). Free memory was 72.7MB in the beginning and 65.2MB in the end (delta: 7.4MB). Peak memory consumption was 66.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 197.48ms. Allocated memory is still 132.1MB. Free memory was 65.2MB in the beginning and 63.6MB in the end (delta: 1.7MB). Peak memory consumption was 32.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 189.90ms. Allocated memory was 132.1MB in the beginning and 159.4MB in the end (delta: 27.3MB). Free memory was 63.6MB in the beginning and 79.9MB in the end (delta: -16.3MB). Peak memory consumption was 35.4MB. Max. memory is 16.1GB. * RCFGBuilder took 4381.55ms. Allocated memory was 159.4MB in the beginning and 224.4MB in the end (delta: 65.0MB). Free memory was 79.9MB in the beginning and 91.6MB in the end (delta: -11.8MB). Peak memory consumption was 92.9MB. Max. memory is 16.1GB. * TraceAbstraction took 280741.72ms. Allocated memory was 224.4MB in the beginning and 2.5GB in the end (delta: 2.3GB). Free memory was 91.6MB in the beginning and 322.7MB in the end (delta: -231.1MB). Peak memory consumption was 2.1GB. Max. memory is 16.1GB. * Witness Printer took 2.63ms. Allocated memory is still 2.5GB. Free memory was 322.7MB in the beginning and 321.6MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8156]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6869. Possible FailurePath: [L4312] int ldv_timer_state_5 = 0; [L4313] int ldv_state_variable_8 ; [L4314] struct timer_list *ldv_timer_list_5 ; [L4315] struct timer_list *ldv_timer_list_4 ; [L4316] struct work_struct *ldv_work_struct_3_1 ; [L4317] struct mmc_host *vub300_mmc_ops_group0 ; [L4318] struct work_struct *ldv_work_struct_1_3 ; [L4319] int ldv_state_variable_0 ; [L4320] int ldv_state_variable_5 ; [L4321] int ldv_work_1_1 ; [L4322] int ldv_work_3_2 ; [L4323] int ldv_work_3_0 ; [L4324] struct work_struct *ldv_work_struct_2_3 ; [L4325] struct work_struct *ldv_work_struct_2_0 ; [L4326] int ldv_timer_state_6 = 0; [L4327] struct work_struct *ldv_work_struct_2_2 ; [L4328] int ldv_timer_state_4 = 0; [L4329] int ref_cnt ; [L4330] int ldv_work_3_3 ; [L4331] int ldv_state_variable_1 ; [L4332] int ldv_state_variable_7 ; [L4333] struct work_struct *ldv_work_struct_3_3 ; [L4334] struct work_struct *ldv_work_struct_1_0 ; [L4335] struct work_struct *ldv_work_struct_1_1 ; [L4336] int ldv_work_1_3 ; [L4337] struct work_struct *ldv_work_struct_2_1 ; [L4338] struct timer_list *ldv_timer_list_6 ; [L4339] struct work_struct *ldv_work_struct_3_2 ; [L4340] int ldv_state_variable_6 ; [L4341] int ldv_work_3_1 ; [L4342] int ldv_state_variable_2 ; [L4343] int ldv_work_2_0 ; [L4344] int usb_counter ; [L4345] struct work_struct *ldv_work_struct_3_0 ; [L4346] int ldv_work_1_2 ; [L4347] int LDV_IN_INTERRUPT = 1; [L4348] struct work_struct *ldv_work_struct_1_2 ; [L4349] int ldv_work_2_2 ; [L4350] int ldv_state_variable_3 ; [L4351] struct usb_interface *vub300_driver_group1 ; [L4352] int ldv_work_1_0 ; [L4353] int ldv_work_2_3 ; [L4354] int ldv_state_variable_4 ; [L4355] int ldv_work_2_1 ; [L4416] static bool limit_speed_to_24_MHz ; [L4417] static bool pad_input_to_usb_pkt ; [L4418] static bool disable_offload_processing ; [L4419] static bool force_1_bit_data_xfers ; [L4420] static bool force_polling_for_irqs ; [L4421] static int firmware_irqpoll_timeout = 1024; [L4422] static int force_max_req_size = 128; [L4423] static int firmware_rom_wait_states = 28; [L4424-L4429] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4430] struct usb_device_id const __mod_usb_device_table ; [L4431] static struct workqueue_struct *cmndworkqueue ; [L4432] static struct workqueue_struct *pollworkqueue ; [L4433] static struct workqueue_struct *deadworkqueue ; [L6419-L6421] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6829-L6835] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6908] int ldv_retval_0 ; [L6910] int ldv_retval_1 ; [L6913] int ldv_retval_3 ; [L6914] int ldv_retval_2 ; [L8159] int INTERF_STATE = 0; [L8160] int SERIAL_STATE = 0; [L8161] void *usb_intfdata = (void *)0; [L8162] struct urb *usb_urb = (struct urb *)0; [L8163] struct usb_device *usb_dev = (struct usb_device *)0; [L8164] int dev_counter = 0; [L8165] int completeFnIntCounter = 0; [L8166] int completeFnBulkCounter = 0; [L8167] void (*completeFnInt)(struct urb * ) ; [L8168] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7553] struct usb_device_id *ldvarg1 ; [L7554] void *tmp ; [L7555] pm_message_t ldvarg0 ; [L7556] struct mmc_card *ldvarg4 ; [L7557] void *tmp___0 ; [L7558] struct mmc_ios *ldvarg3 ; [L7559] void *tmp___1 ; [L7560] int ldvarg5 ; [L7561] struct mmc_request *ldvarg2 ; [L7562] void *tmp___2 ; [L7563] int tmp___3 ; [L7564] int tmp___4 ; [L7565] int tmp___5 ; [L7566] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7568] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7568] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7568] tmp = ldv_init_zalloc(32UL) [L7569] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7570] CALL, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-73786976294838206465:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-73786976294838206465:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=1816, \result={-73786976294838206465:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-73786976294838206465:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7570] RET, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1816UL)={-73786976294838206465:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7570] tmp___0 = ldv_init_zalloc(1816UL) [L7571] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7572] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-36893488147419103233:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-36893488147419103233:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={-36893488147419103233:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-36893488147419103233:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7572] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={-36893488147419103233:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7572] tmp___1 = ldv_init_zalloc(16UL) [L7573] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-92233720368547758081:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-92233720368547758081:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-92233720368547758081:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={-92233720368547758081:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] tmp___2 = ldv_init_zalloc(136UL) [L7575] ldvarg2 = (struct mmc_request *)tmp___2 [L7576] FCALL ldv_initialize() [L7577] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4279] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={90:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4279] tmp = memset(s, c, n) [L4280] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={90:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, tmp={90:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7577] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={90:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, s={89:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4279] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={89:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, s={89:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4279] tmp = memset(s, c, n) [L4280] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={89:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, s={89:0}, SERIAL_STATE=0, tmp={89:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={89:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7579] ldv_state_variable_6 = 1 [L7580] CALL work_init_3() [L6918] ldv_work_3_0 = 0 [L6919] ldv_work_3_1 = 0 [L6920] ldv_work_3_2 = 0 [L6921] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] RET work_init_3() [L7581] ldv_state_variable_3 = 1 [L7582] ldv_state_variable_7 = 0 [L7583] CALL work_init_2() [L6968] ldv_work_2_0 = 0 [L6969] ldv_work_2_1 = 0 [L6970] ldv_work_2_2 = 0 [L6971] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7583] RET work_init_2() [L7584] ldv_state_variable_2 = 1 [L7585] ldv_state_variable_8 = 0 [L7586] CALL work_init_1() [L7336] ldv_work_1_0 = 0 [L7337] ldv_work_1_1 = 0 [L7338] ldv_work_1_2 = 0 [L7339] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7586] RET work_init_1() [L7587] ldv_state_variable_1 = 1 [L7588] ldv_state_variable_4 = 1 [L7589] ref_cnt = 0 [L7590] ldv_state_variable_0 = 1 [L7591] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7593] tmp___3 = __VERIFIER_nondet_int() [L7595] case 0: [L7601] case 1: [L7607] case 2: [L7670] case 3: [L7676] case 4: [L7722] case 5: [L7728] case 6: [L7734] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, tmp___3=7, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7735] COND TRUE ldv_state_variable_0 != 0 [L7736] tmp___6 = __VERIFIER_nondet_int() [L7738] case 0: [L7746] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, tmp___3=7, tmp___6=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7747] COND TRUE ldv_state_variable_0 == 1 [L7748] CALL, EXPR vub300_init() [L6838] int result ; [L6839] struct lock_class_key __key ; [L6840] char const *__lock_name ; [L6841] struct workqueue_struct *tmp ; [L6842] struct lock_class_key __key___0 ; [L6843] char const *__lock_name___0 ; [L6844] struct workqueue_struct *tmp___0 ; [L6845] struct lock_class_key __key___1 ; [L6846] char const *__lock_name___1 ; [L6847] struct workqueue_struct *tmp___1 ; [L6851] __lock_name = "kvub300c" [L6852] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6853] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __key={91:0}, __key___0={93:0}, __key___1={94:0}, __lock_name={73:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6854] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6860] __lock_name___0 = "kvub300p" [L6861] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6862] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={91:0}, __key___0={93:0}, __key___1={94:0}, __lock_name={73:0}, __lock_name___0={76:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6863] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6869] __lock_name___1 = "kvub300d" [L6870] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6871] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={91:0}, __key___0={93:0}, __key___1={94:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6872] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6878] CALL, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L8061] ldv_func_ret_type___9 ldv_func_res ; [L8062] int tmp ; [L8064] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8549] return __VERIFIER_nondet_int(); [L8064] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8064] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8065] ldv_func_res = tmp [L8066] ldv_state_variable_7 = 1 [L8067] usb_counter = 0 [L8068] CALL ldv_usb_driver_7() [L7207] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7209] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-110680464442257309697:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-110680464442257309697:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={-110680464442257309697:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-110680464442257309697:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7209] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={-110680464442257309697:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7209] tmp = ldv_init_zalloc(1288UL) [L7210] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L8068] RET ldv_usb_driver_7() [L8069] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={86:0}, ldv_func_arg1={86:0}, ldv_func_arg2={8707:8706}, ldv_func_arg2={8707:8706}, ldv_func_arg3={82:0}, ldv_func_arg3={82:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6878] RET, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6878] result = ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6879] COND FALSE !(result != 0) [L6884] return (0); [L6884] return (0); [L6884] return (0); [L6884] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7748] RET, EXPR vub300_init() [L7748] ldv_retval_3 = vub300_init() [L7749] COND TRUE ldv_retval_3 == 0 [L7750] ldv_state_variable_0 = 3 [L7751] ldv_state_variable_8 = 1 [L7752] CALL ldv_initialize_mmc_host_ops_8() [L7187] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7189] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-55340232221128654849:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-55340232221128654849:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={-55340232221128654849:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-55340232221128654849:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7189] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={-55340232221128654849:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7189] tmp = ldv_init_zalloc(2624UL) [L7190] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-55340232221128654849:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7752] RET ldv_initialize_mmc_host_ops_8() [L7755] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, tmp___3=7, tmp___6=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7593] tmp___3 = __VERIFIER_nondet_int() [L7595] case 0: [L7601] case 1: [L7607] case 2: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, tmp___3=2, tmp___6=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7608] COND TRUE ldv_state_variable_7 != 0 [L7609] tmp___4 = __VERIFIER_nondet_int() [L7611] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, tmp___3=2, tmp___4=0, tmp___6=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7612] COND TRUE ldv_state_variable_7 == 1 [L7613] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6424] struct vub300_mmc_host *vub300 ; [L6425] struct usb_host_interface *iface_desc ; [L6426] struct usb_device *udev ; [L6427] struct usb_device *tmp ; [L6428] struct usb_device *tmp___0 ; [L6429] int i ; [L6430] int retval ; [L6431] struct urb *command_out_urb ; [L6432] struct urb *command_res_urb ; [L6433] struct mmc_host *mmc ; [L6434] char manufacturer[48U] ; [L6435] char product[32U] ; [L6436] char serial_number[32U] ; [L6437] void *tmp___1 ; [L6438] struct lock_class_key __key ; [L6439] struct lock_class_key __key___0 ; [L6440] int tmp___2 ; [L6441] struct usb_endpoint_descriptor *endpoint ; [L6442] int tmp___4 ; [L6443] char *tmp___5 ; [L6444] int tmp___6 ; [L6445] int tmp___7 ; [L6446] int tmp___8 ; [L6447] unsigned int tmp___9 ; [L6448] unsigned int tmp___10 ; [L6449] unsigned int tmp___11 ; [L6450] struct lock_class_key __key___1 ; [L6451] atomic_long_t __constr_expr_0 ; [L6452] struct lock_class_key __key___2 ; [L6453] atomic_long_t __constr_expr_1 ; [L6454] struct lock_class_key __key___3 ; [L6455] atomic_long_t __constr_expr_2 ; [L6456] int tmp___12 ; [L6457] int tmp___13 ; [L6459] CALL, EXPR interface_to_usbdev(interface) [L7818] struct usb_device *tmp ; [L7820] CALL, EXPR ldv_interface_to_usbdev() [L8272] void *result ; [L8273] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8275] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4232] void *p ; [L4233] void *tmp ; [L4234] int tmp___0 ; [L4236] tmp___0 = __VERIFIER_nondet_int() [L4237] COND FALSE !(tmp___0 != 0) [L4240] tmp = malloc(size) [L4241] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4242] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4242] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4243] return (p); VAL [={0:0}, ={0:0}, \old(size)=1678, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8275] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8275] tmp = ldv_malloc(sizeof(struct usb_device)) [L8276] result = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result={-18446744073709551615:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8277] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result={-18446744073709551615:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8281] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result={-18446744073709551615:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7820] RET, EXPR ldv_interface_to_usbdev() [L7820] tmp = ldv_interface_to_usbdev() [L7821] return (tmp); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, intf={-110680464442257309697:0}, intf={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6459] RET, EXPR interface_to_usbdev(interface) [L6459] tmp = interface_to_usbdev(interface) [L6460] CALL, EXPR ldv_usb_get_dev_43(tmp) [L8007] struct usb_device *tmp ; [L8009] CALL, EXPR ldv_get_dev(ldv_func_arg1) [L8286] int tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, data={-18446744073709551615:0}, data={-18446744073709551615:0}, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8288] COND TRUE (unsigned long )usb_dev == (unsigned long )((struct usb_device *)0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, data={-18446744073709551615:0}, data={-18446744073709551615:0}, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8289] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4285] int tmp ; [L4287] tmp = __VERIFIER_nondet_int() [L4288] return (tmp); VAL [={0:0}, ={0:0}, \result=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8289] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, data={-18446744073709551615:0}, data={-18446744073709551615:0}, deadworkqueue={101:-100}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_undef_int()=1, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8289] tmp = ldv_undef_int() [L8290] COND TRUE tmp != 0 [L8291] dev_counter = dev_counter + 1 [L8292] usb_dev = data VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, data={-18446744073709551615:0}, data={-18446744073709551615:0}, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8300] return (usb_dev); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, data={-18446744073709551615:0}, data={-18446744073709551615:0}, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8009] RET, EXPR ldv_get_dev(ldv_func_arg1) [L8009] tmp = ldv_get_dev(ldv_func_arg1) [L8010] return (tmp); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={-18446744073709551615:0}, ldv_func_arg1={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6460] RET, EXPR ldv_usb_get_dev_43(tmp) [L6460] tmp___0 = ldv_usb_get_dev_43(tmp) [L6461] udev = tmp___0 [L6462] retval = -12 [L6463] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={-18446744073709551615:0}, udev={-18446744073709551615:0}, udev->descriptor.iManufacturer=123, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6463-L6464] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=123, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={-18446744073709551615:0}, arg2={106:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8567] return __VERIFIER_nondet_int(); [L6463-L6464] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={-18446744073709551615:0}, udev={-18446744073709551615:0}, udev->descriptor.iManufacturer=123, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=0, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6465] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={-18446744073709551615:0}, udev={-18446744073709551615:0}, udev->descriptor.iProduct=125, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6465] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=125, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={-18446744073709551615:0}, arg2={107:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8567] return __VERIFIER_nondet_int(); [L6465] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={-18446744073709551615:0}, udev={-18446744073709551615:0}, udev->descriptor.iProduct=125, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=0, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6466] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={-18446744073709551615:0}, udev={-18446744073709551615:0}, udev->descriptor.iSerialNumber=126, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6466-L6467] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=126, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={-18446744073709551615:0}, arg2={113:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8567] return __VERIFIER_nondet_int(); [L6466-L6467] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={-18446744073709551615:0}, udev={-18446744073709551615:0}, udev->descriptor.iSerialNumber=126, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=0, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6469] udev->descriptor.idVendor [L6469] udev->descriptor.idProduct [L6471] CALL, EXPR ldv_usb_alloc_urb_44(0, 208U) [L8015] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, mem_flags=208, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8017] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8191] struct urb *value ; [L8192] void *tmp ; [L8193] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8195] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4232] void *p ; [L4233] void *tmp ; [L4234] int tmp___0 ; [L4236] tmp___0 = __VERIFIER_nondet_int() [L4237] COND TRUE tmp___0 != 0 [L4238] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=0, \old(usb_urb)=0, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=1, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8195] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8195] tmp = ldv_malloc(sizeof(struct urb)) [L8196] value = (struct urb *)tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8197] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L4285] int tmp ; [L4287] tmp = __VERIFIER_nondet_int() [L4288] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8197] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_undef_int()=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8197] tmp___0 = ldv_undef_int() [L8198] COND FALSE !(tmp___0 != 0) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8205] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8017] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, mem_flags=208, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8017] tmp = ldv_alloc_urb() [L8018] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, mem_flags=208, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6471] RET, EXPR ldv_usb_alloc_urb_44(0, 208U) [L6471] command_out_urb = ldv_usb_alloc_urb_44(0, 208U) [L6472] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6473] retval = -12 [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, command_out_urb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, retval=-12, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={-18446744073709551615:0}, udev={-18446744073709551615:0}, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7613] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7613] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7614] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, tmp___3=2, tmp___4=0, tmp___6=1, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7593] tmp___3 = __VERIFIER_nondet_int() [L7595] case 0: [L7601] case 1: [L7607] case 2: [L7670] case 3: [L7676] case 4: [L7722] case 5: [L7728] case 6: [L7734] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, tmp___3=7, tmp___4=0, tmp___6=1, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7735] COND TRUE ldv_state_variable_0 != 0 [L7736] tmp___6 = __VERIFIER_nondet_int() [L7738] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, tmp___3=7, tmp___4=0, tmp___6=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7739] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7740] CALL vub300_exit() [L6898] CALL ldv_usb_deregister_60(& vub300_driver) [L8099] FCALL usb_deregister(arg) [L8100] ldv_state_variable_7 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg={86:0}, arg={86:0}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6898] RET ldv_usb_deregister_60(& vub300_driver) [L6899] CALL ldv_flush_workqueue_61(cmndworkqueue) [L8107] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8108] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8108] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6899] RET ldv_flush_workqueue_61(cmndworkqueue) [L6900] CALL ldv_flush_workqueue_62(pollworkqueue) [L8115] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8116] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8116] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6900] RET ldv_flush_workqueue_62(pollworkqueue) [L6901] CALL ldv_flush_workqueue_63(deadworkqueue) [L8123] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8124] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8124] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6901] RET ldv_flush_workqueue_63(deadworkqueue) [L6902] CALL ldv_destroy_workqueue_64(cmndworkqueue) [L8131] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8132] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8132] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6902] RET ldv_destroy_workqueue_64(cmndworkqueue) [L6903] CALL ldv_destroy_workqueue_65(pollworkqueue) [L8139] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8140] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8140] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6903] RET ldv_destroy_workqueue_65(pollworkqueue) [L6904] CALL ldv_destroy_workqueue_66(deadworkqueue) [L8147] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8148] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=-18446744073709551615, \old(usb_dev)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=0, \old(usb_dev)=-18446744073709551615, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8148] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L6904] RET ldv_destroy_workqueue_66(deadworkqueue) [L7740] RET vub300_exit() [L7741] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-92233720368547758081:0}, ldvarg3={-36893488147419103233:0}, ldvarg4={-73786976294838206465:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-73786976294838206465:0}, tmp___1={-36893488147419103233:0}, tmp___2={-92233720368547758081:0}, tmp___3=7, tmp___4=0, tmp___6=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L7782] CALL ldv_check_final_state() [L8378] COND FALSE !((unsigned long )usb_urb != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8382] COND TRUE (unsigned long )usb_dev != (unsigned long )((struct usb_device *)0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8383] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] [L8156] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, cmndworkqueue={-96:97}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={101:-100}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={-18446744073709551615:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-55340232221128654849:0}, vub300_table={84:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 93 procedures, 1579 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 280.2s, OverallIterations: 21, TraceHistogramMax: 8, PathProgramHistogramMax: 4, EmptinessCheckTime: 0.5s, AutomataDifference: 247.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 78764 SdHoareTripleChecker+Valid, 227.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 75145 mSDsluCounter, 175252 SdHoareTripleChecker+Invalid, 206.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 129261 mSDsCounter, 50064 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 101616 IncrementalHoareTripleChecker+Invalid, 151680 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 50064 mSolverCounterUnsat, 45991 mSDtfsCounter, 101616 mSolverCounterSat, 0.8s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 4049 GetRequests, 3739 SyntacticMatches, 6 SemanticMatches, 304 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1186 ImplicationChecksByTransitivity, 4.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=24277occurred in iteration=9, InterpolantAutomatonStates: 208, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 13.7s AutomataMinimizationTime, 20 MinimizatonAttempts, 24045 StatesRemovedByMinimization, 20 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.4s SsaConstructionTime, 4.3s SatisfiabilityAnalysisTime, 10.2s InterpolantComputationTime, 6500 NumberOfCodeBlocks, 6483 NumberOfCodeBlocksAsserted, 31 NumberOfCheckSat, 7110 ConstructedInterpolants, 0 QuantifiedInterpolants, 15645 SizeOfPredicates, 14 NumberOfNonLiveVariables, 15137 ConjunctsInSsa, 91 ConjunctsInUnsatCore, 28 InterpolantComputations, 17 PerfectInterpolantSequences, 7163/7259 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 22:50:06,779 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-12-06 22:50:06,804 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 0f420ae29f1d217fd86475befc2729bf689978fed36c08e1357ee5c24faa0f48 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 22:50:08,234 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 22:50:08,236 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 22:50:08,270 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 22:50:08,271 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 22:50:08,272 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 22:50:08,274 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 22:50:08,276 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 22:50:08,278 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 22:50:08,279 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 22:50:08,281 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 22:50:08,282 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 22:50:08,283 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 22:50:08,284 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 22:50:08,285 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 22:50:08,287 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 22:50:08,288 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 22:50:08,289 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 22:50:08,291 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 22:50:08,293 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 22:50:08,295 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 22:50:08,297 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 22:50:08,298 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 22:50:08,299 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 22:50:08,303 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 22:50:08,303 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 22:50:08,303 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 22:50:08,305 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 22:50:08,305 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 22:50:08,306 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 22:50:08,307 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 22:50:08,307 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 22:50:08,308 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 22:50:08,309 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 22:50:08,310 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 22:50:08,310 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 22:50:08,311 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 22:50:08,311 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 22:50:08,311 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 22:50:08,312 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 22:50:08,313 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 22:50:08,314 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-06 22:50:08,339 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 22:50:08,340 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 22:50:08,340 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 22:50:08,340 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 22:50:08,341 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 22:50:08,341 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 22:50:08,342 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 22:50:08,342 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 22:50:08,342 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 22:50:08,342 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 22:50:08,342 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 22:50:08,343 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 22:50:08,343 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 22:50:08,343 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 22:50:08,343 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-06 22:50:08,343 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-06 22:50:08,344 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-06 22:50:08,344 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 22:50:08,344 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 22:50:08,344 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 22:50:08,344 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 22:50:08,345 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 22:50:08,345 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 22:50:08,345 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:50:08,345 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 22:50:08,345 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 22:50:08,346 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 22:50:08,346 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-06 22:50:08,346 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-06 22:50:08,346 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 22:50:08,346 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 22:50:08,347 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 22:50:08,347 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 22:50:08,347 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-06 22:50:08,347 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0f420ae29f1d217fd86475befc2729bf689978fed36c08e1357ee5c24faa0f48 [2021-12-06 22:50:08,571 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 22:50:08,586 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 22:50:08,588 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 22:50:08,589 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 22:50:08,589 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 22:50:08,590 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:50:08,635 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data/33ebfaefb/a191700622c341edbb0e2264f7215043/FLAGc84d30de9 [2021-12-06 22:50:09,261 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 22:50:09,261 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:50:09,290 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data/33ebfaefb/a191700622c341edbb0e2264f7215043/FLAGc84d30de9 [2021-12-06 22:50:09,683 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/data/33ebfaefb/a191700622c341edbb0e2264f7215043 [2021-12-06 22:50:09,688 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 22:50:09,690 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 22:50:09,691 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 22:50:09,691 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 22:50:09,695 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 22:50:09,696 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:50:09" (1/1) ... [2021-12-06 22:50:09,698 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1137b501 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:09, skipping insertion in model container [2021-12-06 22:50:09,698 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 10:50:09" (1/1) ... [2021-12-06 22:50:09,705 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 22:50:09,811 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:50:11,099 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[238753,238766] [2021-12-06 22:50:11,131 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:50:11,153 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-06 22:50:11,212 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 22:50:11,454 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[238753,238766] [2021-12-06 22:50:11,465 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:50:11,475 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 22:50:11,665 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[238753,238766] [2021-12-06 22:50:11,671 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 22:50:11,734 INFO L208 MainTranslator]: Completed translation [2021-12-06 22:50:11,735 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11 WrapperNode [2021-12-06 22:50:11,735 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 22:50:11,736 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 22:50:11,736 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 22:50:11,736 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 22:50:11,743 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:11,796 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:11,889 INFO L137 Inliner]: procedures = 272, calls = 1800, calls flagged for inlining = 103, calls inlined = 99, statements flattened = 4390 [2021-12-06 22:50:11,890 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 22:50:11,890 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 22:50:11,890 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 22:50:11,890 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 22:50:11,897 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:11,897 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:11,942 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:11,942 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:12,043 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:12,061 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:12,075 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:12,092 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 22:50:12,093 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 22:50:12,093 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 22:50:12,093 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 22:50:12,093 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (1/1) ... [2021-12-06 22:50:12,099 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 22:50:12,107 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 22:50:12,117 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 22:50:12,120 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 22:50:12,147 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-06 22:50:12,147 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-12-06 22:50:12,148 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-12-06 22:50:12,148 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-06 22:50:12,148 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-06 22:50:12,148 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-06 22:50:12,148 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-06 22:50:12,148 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-06 22:50:12,148 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-06 22:50:12,148 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-06 22:50:12,148 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-06 22:50:12,148 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-06 22:50:12,148 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-12-06 22:50:12,148 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-12-06 22:50:12,149 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_11 [2021-12-06 22:50:12,149 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_11 [2021-12-06 22:50:12,149 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-12-06 22:50:12,149 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-12-06 22:50:12,149 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-12-06 22:50:12,149 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-12-06 22:50:12,149 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-06 22:50:12,149 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-06 22:50:12,149 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-12-06 22:50:12,149 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-12-06 22:50:12,149 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-06 22:50:12,149 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-06 22:50:12,150 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-06 22:50:12,150 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-06 22:50:12,150 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-12-06 22:50:12,150 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-12-06 22:50:12,150 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-12-06 22:50:12,150 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-12-06 22:50:12,150 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-12-06 22:50:12,150 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-12-06 22:50:12,150 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-06 22:50:12,150 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-06 22:50:12,150 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-06 22:50:12,151 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-06 22:50:12,151 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_49 [2021-12-06 22:50:12,151 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_49 [2021-12-06 22:50:12,151 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-06 22:50:12,151 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-06 22:50:12,151 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-12-06 22:50:12,151 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-12-06 22:50:12,151 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-12-06 22:50:12,151 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-12-06 22:50:12,151 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-12-06 22:50:12,151 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-12-06 22:50:12,151 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-12-06 22:50:12,152 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-12-06 22:50:12,152 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-12-06 22:50:12,152 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-12-06 22:50:12,152 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_26 [2021-12-06 22:50:12,152 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_26 [2021-12-06 22:50:12,152 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-06 22:50:12,152 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_28 [2021-12-06 22:50:12,152 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_28 [2021-12-06 22:50:12,152 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-06 22:50:12,152 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-06 22:50:12,152 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-12-06 22:50:12,152 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-12-06 22:50:12,153 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-06 22:50:12,153 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2021-12-06 22:50:12,153 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2021-12-06 22:50:12,153 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-12-06 22:50:12,153 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-12-06 22:50:12,153 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-12-06 22:50:12,153 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-12-06 22:50:12,153 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-12-06 22:50:12,153 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-12-06 22:50:12,153 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_14 [2021-12-06 22:50:12,153 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_14 [2021-12-06 22:50:12,153 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-12-06 22:50:12,154 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-06 22:50:12,154 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-12-06 22:50:12,155 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-12-06 22:50:12,155 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-06 22:50:12,155 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-06 22:50:12,155 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-12-06 22:50:12,155 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-12-06 22:50:12,155 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-12-06 22:50:12,155 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-12-06 22:50:12,155 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-12-06 22:50:12,155 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-12-06 22:50:12,155 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-12-06 22:50:12,155 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-12-06 22:50:12,155 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-12-06 22:50:12,156 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-12-06 22:50:12,156 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-12-06 22:50:12,156 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-12-06 22:50:12,156 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-12-06 22:50:12,156 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-12-06 22:50:12,156 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-12-06 22:50:12,156 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-12-06 22:50:12,156 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-12-06 22:50:12,156 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-12-06 22:50:12,156 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-12-06 22:50:12,156 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-12-06 22:50:12,156 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-12-06 22:50:12,157 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-12-06 22:50:12,157 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_6 [2021-12-06 22:50:12,157 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_6 [2021-12-06 22:50:12,157 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-06 22:50:12,157 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-06 22:50:12,157 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-06 22:50:12,157 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-06 22:50:12,157 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-06 22:50:12,157 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-06 22:50:12,157 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-12-06 22:50:12,157 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-12-06 22:50:12,157 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-06 22:50:12,158 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-06 22:50:12,158 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-06 22:50:12,158 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-06 22:50:12,158 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-12-06 22:50:12,158 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-12-06 22:50:12,158 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-12-06 22:50:12,158 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-12-06 22:50:12,158 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-06 22:50:12,158 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-12-06 22:50:12,158 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-12-06 22:50:12,158 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-06 22:50:12,158 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-06 22:50:12,159 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-12-06 22:50:12,159 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-12-06 22:50:12,159 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-06 22:50:12,159 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-06 22:50:12,159 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-06 22:50:12,159 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_31 [2021-12-06 22:50:12,159 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_31 [2021-12-06 22:50:12,159 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-12-06 22:50:12,159 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-12-06 22:50:12,159 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-06 22:50:12,159 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_6 [2021-12-06 22:50:12,159 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_6 [2021-12-06 22:50:12,160 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-12-06 22:50:12,160 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-12-06 22:50:12,160 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-12-06 22:50:12,160 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-12-06 22:50:12,160 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-12-06 22:50:12,160 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-12-06 22:50:12,160 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-12-06 22:50:12,160 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-12-06 22:50:12,160 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 22:50:12,160 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-12-06 22:50:12,160 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-12-06 22:50:12,160 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_6 [2021-12-06 22:50:12,160 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_6 [2021-12-06 22:50:12,161 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_8 [2021-12-06 22:50:12,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_8 [2021-12-06 22:50:12,161 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-06 22:50:12,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-06 22:50:12,161 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-06 22:50:12,161 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-12-06 22:50:12,161 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-12-06 22:50:12,161 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-06 22:50:12,161 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-12-06 22:50:12,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-12-06 22:50:12,161 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-06 22:50:12,161 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 22:50:12,162 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-06 22:50:12,162 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-06 22:50:12,162 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-12-06 22:50:12,162 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-12-06 22:50:12,162 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-12-06 22:50:12,162 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-12-06 22:50:12,162 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-12-06 22:50:12,162 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-12-06 22:50:12,162 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-12-06 22:50:12,162 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-12-06 22:50:12,162 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-12-06 22:50:12,162 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-12-06 22:50:12,162 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-12-06 22:50:12,163 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-12-06 22:50:12,163 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-12-06 22:50:12,163 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-12-06 22:50:12,163 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-12-06 22:50:12,163 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-12-06 22:50:12,163 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-12-06 22:50:12,163 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-12-06 22:50:12,163 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-12-06 22:50:12,163 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-12-06 22:50:12,163 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-12-06 22:50:12,163 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-12-06 22:50:12,163 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-12-06 22:50:12,163 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-12-06 22:50:12,163 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~C_ULONG~TO~VOID [2021-12-06 22:50:12,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~C_ULONG~TO~VOID [2021-12-06 22:50:12,164 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_46 [2021-12-06 22:50:12,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_46 [2021-12-06 22:50:12,164 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-06 22:50:12,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-06 22:50:12,164 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-06 22:50:12,164 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-12-06 22:50:12,164 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-12-06 22:50:12,164 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-12-06 22:50:12,164 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-12-06 22:50:12,164 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-06 22:50:12,164 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-06 22:50:12,164 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-12-06 22:50:12,165 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-12-06 22:50:12,165 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-12-06 22:50:12,165 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-12-06 22:50:12,165 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-12-06 22:50:12,165 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 22:50:12,165 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 22:50:12,641 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 22:50:12,644 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 22:50:21,209 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-06 22:50:59,480 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 22:50:59,498 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 22:50:59,498 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-06 22:50:59,501 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:50:59 BoogieIcfgContainer [2021-12-06 22:50:59,502 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 22:50:59,503 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 22:50:59,503 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 22:50:59,505 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 22:50:59,505 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 10:50:09" (1/3) ... [2021-12-06 22:50:59,505 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@48fb038d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:50:59, skipping insertion in model container [2021-12-06 22:50:59,506 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 10:50:11" (2/3) ... [2021-12-06 22:50:59,506 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@48fb038d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 10:50:59, skipping insertion in model container [2021-12-06 22:50:59,506 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:50:59" (3/3) ... [2021-12-06 22:50:59,507 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-5fdb450-1-144_2a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-12-06 22:50:59,510 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 22:50:59,511 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 22:50:59,553 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 22:50:59,558 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 22:50:59,558 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 22:50:59,594 INFO L276 IsEmpty]: Start isEmpty. Operand has 1578 states, 1108 states have (on average 1.3998194945848375) internal successors, (1551), 1173 states have internal predecessors, (1551), 377 states have call successors, (377), 92 states have call predecessors, (377), 91 states have return successors, (368), 342 states have call predecessors, (368), 368 states have call successors, (368) [2021-12-06 22:50:59,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:50:59,608 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:50:59,608 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:50:59,609 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:50:59,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:50:59,612 INFO L85 PathProgramCache]: Analyzing trace with hash -54991562, now seen corresponding path program 1 times [2021-12-06 22:50:59,624 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:50:59,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1817579583] [2021-12-06 22:50:59,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:50:59,625 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:50:59,625 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:50:59,626 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:50:59,627 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-06 22:51:00,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:00,148 INFO L263 TraceCheckSpWp]: Trace formula consists of 927 conjuncts, 1 conjunts are in the unsatisfiable core [2021-12-06 22:51:00,156 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:00,695 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-12-06 22:51:00,695 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:00,696 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:00,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1817579583] [2021-12-06 22:51:00,696 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1817579583] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:00,697 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:00,697 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:51:00,698 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [768564809] [2021-12-06 22:51:00,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:00,703 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 22:51:00,704 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:00,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 22:51:00,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:51:00,736 INFO L87 Difference]: Start difference. First operand has 1578 states, 1108 states have (on average 1.3998194945848375) internal successors, (1551), 1173 states have internal predecessors, (1551), 377 states have call successors, (377), 92 states have call predecessors, (377), 91 states have return successors, (368), 342 states have call predecessors, (368), 368 states have call successors, (368) Second operand has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 22:51:00,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:00,855 INFO L93 Difference]: Finished difference Result 3151 states and 4641 transitions. [2021-12-06 22:51:00,855 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 22:51:00,856 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 114 [2021-12-06 22:51:00,857 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:00,880 INFO L225 Difference]: With dead ends: 3151 [2021-12-06 22:51:00,881 INFO L226 Difference]: Without dead ends: 1562 [2021-12-06 22:51:00,892 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 113 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 22:51:00,894 INFO L933 BasicCegarLoop]: 2288 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 2288 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:00,895 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 2288 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:51:00,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1562 states. [2021-12-06 22:51:00,992 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1562 to 1562. [2021-12-06 22:51:00,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1562 states, 1103 states have (on average 1.3907524932003625) internal successors, (1534), 1157 states have internal predecessors, (1534), 368 states have call successors, (368), 91 states have call predecessors, (368), 90 states have return successors, (363), 337 states have call predecessors, (363), 363 states have call successors, (363) [2021-12-06 22:51:01,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1562 states to 1562 states and 2265 transitions. [2021-12-06 22:51:01,009 INFO L78 Accepts]: Start accepts. Automaton has 1562 states and 2265 transitions. Word has length 114 [2021-12-06 22:51:01,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:01,010 INFO L470 AbstractCegarLoop]: Abstraction has 1562 states and 2265 transitions. [2021-12-06 22:51:01,010 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-06 22:51:01,010 INFO L276 IsEmpty]: Start isEmpty. Operand 1562 states and 2265 transitions. [2021-12-06 22:51:01,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-06 22:51:01,016 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:01,016 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:01,041 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-06 22:51:01,217 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:01,217 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:01,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:01,218 INFO L85 PathProgramCache]: Analyzing trace with hash 2039740222, now seen corresponding path program 1 times [2021-12-06 22:51:01,219 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:01,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [928188088] [2021-12-06 22:51:01,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:01,220 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:01,220 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:01,220 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:01,222 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-06 22:51:01,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:01,682 INFO L263 TraceCheckSpWp]: Trace formula consists of 927 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-06 22:51:01,687 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:02,267 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2021-12-06 22:51:02,268 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:02,268 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:02,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [928188088] [2021-12-06 22:51:02,268 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [928188088] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:02,268 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:02,268 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 22:51:02,268 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [968727067] [2021-12-06 22:51:02,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:02,270 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 22:51:02,270 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:02,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 22:51:02,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 22:51:02,271 INFO L87 Difference]: Start difference. First operand 1562 states and 2265 transitions. Second operand has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-12-06 22:51:03,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:03,018 INFO L93 Difference]: Finished difference Result 3118 states and 4525 transitions. [2021-12-06 22:51:03,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 22:51:03,020 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 114 [2021-12-06 22:51:03,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:03,034 INFO L225 Difference]: With dead ends: 3118 [2021-12-06 22:51:03,035 INFO L226 Difference]: Without dead ends: 1565 [2021-12-06 22:51:03,041 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 109 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-06 22:51:03,042 INFO L933 BasicCegarLoop]: 2256 mSDtfsCounter, 6 mSDsluCounter, 9010 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11266 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:03,042 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11266 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-06 22:51:03,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1565 states. [2021-12-06 22:51:03,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1565 to 1565. [2021-12-06 22:51:03,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1565 states, 1105 states have (on average 1.3909502262443438) internal successors, (1537), 1160 states have internal predecessors, (1537), 368 states have call successors, (368), 91 states have call predecessors, (368), 91 states have return successors, (367), 337 states have call predecessors, (367), 363 states have call successors, (367) [2021-12-06 22:51:03,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1565 states to 1565 states and 2272 transitions. [2021-12-06 22:51:03,106 INFO L78 Accepts]: Start accepts. Automaton has 1565 states and 2272 transitions. Word has length 114 [2021-12-06 22:51:03,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:03,107 INFO L470 AbstractCegarLoop]: Abstraction has 1565 states and 2272 transitions. [2021-12-06 22:51:03,107 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-12-06 22:51:03,107 INFO L276 IsEmpty]: Start isEmpty. Operand 1565 states and 2272 transitions. [2021-12-06 22:51:03,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-12-06 22:51:03,111 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:03,111 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:03,132 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-06 22:51:03,311 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:03,312 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:03,312 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:03,313 INFO L85 PathProgramCache]: Analyzing trace with hash 1340746150, now seen corresponding path program 1 times [2021-12-06 22:51:03,313 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:03,314 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1775625674] [2021-12-06 22:51:03,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:03,314 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:03,314 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:03,315 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:03,317 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-06 22:51:03,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:03,824 INFO L263 TraceCheckSpWp]: Trace formula consists of 949 conjuncts, 6 conjunts are in the unsatisfiable core [2021-12-06 22:51:03,827 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:04,475 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2021-12-06 22:51:04,475 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:51:05,939 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-06 22:51:05,939 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:05,939 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1775625674] [2021-12-06 22:51:05,940 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1775625674] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:51:05,940 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 22:51:05,940 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 11 [2021-12-06 22:51:05,940 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1159642524] [2021-12-06 22:51:05,940 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 22:51:05,940 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-12-06 22:51:05,941 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:05,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-12-06 22:51:05,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2021-12-06 22:51:05,941 INFO L87 Difference]: Start difference. First operand 1565 states and 2272 transitions. Second operand has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:51:07,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:07,064 INFO L93 Difference]: Finished difference Result 3124 states and 4539 transitions. [2021-12-06 22:51:07,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-06 22:51:07,066 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 116 [2021-12-06 22:51:07,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:07,080 INFO L225 Difference]: With dead ends: 3124 [2021-12-06 22:51:07,080 INFO L226 Difference]: Without dead ends: 1568 [2021-12-06 22:51:07,087 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 221 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=46, Invalid=136, Unknown=0, NotChecked=0, Total=182 [2021-12-06 22:51:07,088 INFO L933 BasicCegarLoop]: 2257 mSDtfsCounter, 15 mSDsluCounter, 9011 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 11268 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:07,088 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [17 Valid, 11268 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-06 22:51:07,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1568 states. [2021-12-06 22:51:07,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1568 to 1566. [2021-12-06 22:51:07,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1566 states, 1106 states have (on average 1.391500904159132) internal successors, (1539), 1161 states have internal predecessors, (1539), 368 states have call successors, (368), 91 states have call predecessors, (368), 91 states have return successors, (367), 337 states have call predecessors, (367), 363 states have call successors, (367) [2021-12-06 22:51:07,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1566 states to 1566 states and 2274 transitions. [2021-12-06 22:51:07,137 INFO L78 Accepts]: Start accepts. Automaton has 1566 states and 2274 transitions. Word has length 116 [2021-12-06 22:51:07,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:07,138 INFO L470 AbstractCegarLoop]: Abstraction has 1566 states and 2274 transitions. [2021-12-06 22:51:07,138 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:51:07,138 INFO L276 IsEmpty]: Start isEmpty. Operand 1566 states and 2274 transitions. [2021-12-06 22:51:07,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2021-12-06 22:51:07,140 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:07,141 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:07,161 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (4)] Ended with exit code 0 [2021-12-06 22:51:07,341 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:07,341 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:07,342 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:07,342 INFO L85 PathProgramCache]: Analyzing trace with hash -715723650, now seen corresponding path program 2 times [2021-12-06 22:51:07,342 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:07,343 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1336893496] [2021-12-06 22:51:07,343 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 22:51:07,343 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:07,343 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:07,343 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:07,344 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-06 22:51:07,709 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 22:51:07,709 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:51:07,726 INFO L263 TraceCheckSpWp]: Trace formula consists of 748 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 22:51:07,729 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:10,980 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-12-06 22:51:10,980 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:10,980 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:10,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1336893496] [2021-12-06 22:51:10,980 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1336893496] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:10,980 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:10,981 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:51:10,981 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [803140831] [2021-12-06 22:51:10,981 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:10,981 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:51:10,981 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:10,982 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:51:10,982 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:10,982 INFO L87 Difference]: Start difference. First operand 1566 states and 2274 transitions. Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:11,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:11,297 INFO L93 Difference]: Finished difference Result 4651 states and 7093 transitions. [2021-12-06 22:51:11,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:51:11,298 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 118 [2021-12-06 22:51:11,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:11,326 INFO L225 Difference]: With dead ends: 4651 [2021-12-06 22:51:11,326 INFO L226 Difference]: Without dead ends: 3108 [2021-12-06 22:51:11,338 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 117 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:11,339 INFO L933 BasicCegarLoop]: 2883 mSDtfsCounter, 2296 mSDsluCounter, 2261 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2296 SdHoareTripleChecker+Valid, 5144 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:11,339 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2296 Valid, 5144 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 22:51:11,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3108 states. [2021-12-06 22:51:11,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3108 to 3094. [2021-12-06 22:51:11,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3094 states, 2189 states have (on average 1.392416628597533) internal successors, (3048), 2294 states have internal predecessors, (3048), 724 states have call successors, (724), 180 states have call predecessors, (724), 180 states have return successors, (858), 667 states have call predecessors, (858), 719 states have call successors, (858) [2021-12-06 22:51:11,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3094 states to 3094 states and 4630 transitions. [2021-12-06 22:51:11,485 INFO L78 Accepts]: Start accepts. Automaton has 3094 states and 4630 transitions. Word has length 118 [2021-12-06 22:51:11,485 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:11,485 INFO L470 AbstractCegarLoop]: Abstraction has 3094 states and 4630 transitions. [2021-12-06 22:51:11,485 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:11,485 INFO L276 IsEmpty]: Start isEmpty. Operand 3094 states and 4630 transitions. [2021-12-06 22:51:11,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 120 [2021-12-06 22:51:11,487 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:11,488 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:11,506 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2021-12-06 22:51:11,688 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:11,688 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:11,689 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:11,689 INFO L85 PathProgramCache]: Analyzing trace with hash -713137287, now seen corresponding path program 1 times [2021-12-06 22:51:11,690 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:11,690 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1698626139] [2021-12-06 22:51:11,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:11,690 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:11,690 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:11,691 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:11,691 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-06 22:51:12,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:12,181 INFO L263 TraceCheckSpWp]: Trace formula consists of 972 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-06 22:51:12,184 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:12,949 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-06 22:51:12,949 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:51:14,943 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2021-12-06 22:51:14,943 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:14,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1698626139] [2021-12-06 22:51:14,944 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1698626139] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:51:14,944 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 22:51:14,944 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 13 [2021-12-06 22:51:14,944 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1582286810] [2021-12-06 22:51:14,944 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 22:51:14,944 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-06 22:51:14,944 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:14,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-06 22:51:14,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2021-12-06 22:51:14,945 INFO L87 Difference]: Start difference. First operand 3094 states and 4630 transitions. Second operand has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:51:17,444 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:17,444 INFO L93 Difference]: Finished difference Result 6193 states and 9281 transitions. [2021-12-06 22:51:17,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-06 22:51:17,446 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 119 [2021-12-06 22:51:17,447 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:17,478 INFO L225 Difference]: With dead ends: 6193 [2021-12-06 22:51:17,478 INFO L226 Difference]: Without dead ends: 3108 [2021-12-06 22:51:17,500 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 225 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2021-12-06 22:51:17,500 INFO L933 BasicCegarLoop]: 2258 mSDtfsCounter, 13 mSDsluCounter, 22532 mSDsCounter, 0 mSdLazyCounter, 244 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 24790 SdHoareTripleChecker+Invalid, 250 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 244 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:17,501 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 24790 Invalid, 250 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 244 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2021-12-06 22:51:17,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3108 states. [2021-12-06 22:51:17,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3108 to 3095. [2021-12-06 22:51:17,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3095 states, 2190 states have (on average 1.3926940639269407) internal successors, (3050), 2295 states have internal predecessors, (3050), 724 states have call successors, (724), 180 states have call predecessors, (724), 180 states have return successors, (858), 667 states have call predecessors, (858), 719 states have call successors, (858) [2021-12-06 22:51:17,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3095 states to 3095 states and 4632 transitions. [2021-12-06 22:51:17,612 INFO L78 Accepts]: Start accepts. Automaton has 3095 states and 4632 transitions. Word has length 119 [2021-12-06 22:51:17,613 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:17,613 INFO L470 AbstractCegarLoop]: Abstraction has 3095 states and 4632 transitions. [2021-12-06 22:51:17,613 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:51:17,613 INFO L276 IsEmpty]: Start isEmpty. Operand 3095 states and 4632 transitions. [2021-12-06 22:51:17,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-12-06 22:51:17,615 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:17,615 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:17,636 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (6)] Ended with exit code 0 [2021-12-06 22:51:17,816 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:17,816 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:17,816 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:17,817 INFO L85 PathProgramCache]: Analyzing trace with hash -54181871, now seen corresponding path program 2 times [2021-12-06 22:51:17,817 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:17,817 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [519744965] [2021-12-06 22:51:17,817 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 22:51:17,817 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:17,818 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:17,818 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:17,819 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-06 22:51:18,164 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 22:51:18,164 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:51:18,181 INFO L263 TraceCheckSpWp]: Trace formula consists of 749 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 22:51:18,183 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:21,690 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-12-06 22:51:21,691 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:21,691 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:21,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [519744965] [2021-12-06 22:51:21,691 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [519744965] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:21,691 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:21,691 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:51:21,691 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1860025078] [2021-12-06 22:51:21,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:21,692 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:51:21,692 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:21,692 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:51:21,692 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:21,693 INFO L87 Difference]: Start difference. First operand 3095 states and 4632 transitions. Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:22,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:22,049 INFO L93 Difference]: Finished difference Result 9234 states and 14642 transitions. [2021-12-06 22:51:22,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:51:22,050 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 121 [2021-12-06 22:51:22,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:22,090 INFO L225 Difference]: With dead ends: 9234 [2021-12-06 22:51:22,090 INFO L226 Difference]: Without dead ends: 6162 [2021-12-06 22:51:22,107 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:22,107 INFO L933 BasicCegarLoop]: 2917 mSDtfsCounter, 2285 mSDsluCounter, 2225 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2285 SdHoareTripleChecker+Valid, 5142 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:22,108 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2285 Valid, 5142 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 22:51:22,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6162 states. [2021-12-06 22:51:22,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6162 to 6148. [2021-12-06 22:51:22,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6148 states, 4353 states have (on average 1.3919136227888813) internal successors, (6059), 4558 states have internal predecessors, (6059), 1436 states have call successors, (1436), 358 states have call predecessors, (1436), 358 states have return successors, (2022), 1327 states have call predecessors, (2022), 1431 states have call successors, (2022) [2021-12-06 22:51:22,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6148 states to 6148 states and 9517 transitions. [2021-12-06 22:51:22,415 INFO L78 Accepts]: Start accepts. Automaton has 6148 states and 9517 transitions. Word has length 121 [2021-12-06 22:51:22,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:22,415 INFO L470 AbstractCegarLoop]: Abstraction has 6148 states and 9517 transitions. [2021-12-06 22:51:22,416 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:22,416 INFO L276 IsEmpty]: Start isEmpty. Operand 6148 states and 9517 transitions. [2021-12-06 22:51:22,419 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2021-12-06 22:51:22,419 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:22,419 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:22,437 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-12-06 22:51:22,620 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:22,620 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:22,620 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:22,620 INFO L85 PathProgramCache]: Analyzing trace with hash -1680173751, now seen corresponding path program 1 times [2021-12-06 22:51:22,621 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:22,621 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [601782713] [2021-12-06 22:51:22,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:22,622 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:22,622 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:22,622 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:22,623 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-12-06 22:51:23,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:23,094 INFO L263 TraceCheckSpWp]: Trace formula consists of 995 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 22:51:23,097 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:24,009 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 24 proven. 6 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2021-12-06 22:51:24,010 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 22:51:26,581 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2021-12-06 22:51:26,582 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:26,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [601782713] [2021-12-06 22:51:26,582 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [601782713] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 22:51:26,582 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-06 22:51:26,583 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2021-12-06 22:51:26,583 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [64624705] [2021-12-06 22:51:26,583 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-06 22:51:26,584 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-06 22:51:26,584 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:26,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-06 22:51:26,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=165, Unknown=0, NotChecked=0, Total=210 [2021-12-06 22:51:26,585 INFO L87 Difference]: Start difference. First operand 6148 states and 9517 transitions. Second operand has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:51:29,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:29,738 INFO L93 Difference]: Finished difference Result 12330 states and 19123 transitions. [2021-12-06 22:51:29,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-06 22:51:29,740 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 122 [2021-12-06 22:51:29,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:29,781 INFO L225 Difference]: With dead ends: 12330 [2021-12-06 22:51:29,781 INFO L226 Difference]: Without dead ends: 6191 [2021-12-06 22:51:29,806 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 247 GetRequests, 229 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=83, Invalid=297, Unknown=0, NotChecked=0, Total=380 [2021-12-06 22:51:29,807 INFO L933 BasicCegarLoop]: 2259 mSDtfsCounter, 26 mSDsluCounter, 20287 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 22546 SdHoareTripleChecker+Invalid, 299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:29,807 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 22546 Invalid, 299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2021-12-06 22:51:29,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6191 states. [2021-12-06 22:51:29,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6191 to 6149. [2021-12-06 22:51:29,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6149 states, 4354 states have (on average 1.3920532843362425) internal successors, (6061), 4559 states have internal predecessors, (6061), 1436 states have call successors, (1436), 358 states have call predecessors, (1436), 358 states have return successors, (2022), 1327 states have call predecessors, (2022), 1431 states have call successors, (2022) [2021-12-06 22:51:30,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6149 states to 6149 states and 9519 transitions. [2021-12-06 22:51:30,040 INFO L78 Accepts]: Start accepts. Automaton has 6149 states and 9519 transitions. Word has length 122 [2021-12-06 22:51:30,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:30,040 INFO L470 AbstractCegarLoop]: Abstraction has 6149 states and 9519 transitions. [2021-12-06 22:51:30,040 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-06 22:51:30,040 INFO L276 IsEmpty]: Start isEmpty. Operand 6149 states and 9519 transitions. [2021-12-06 22:51:30,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-12-06 22:51:30,042 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:30,042 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:30,064 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (8)] Ended with exit code 0 [2021-12-06 22:51:30,243 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:30,243 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:30,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:30,244 INFO L85 PathProgramCache]: Analyzing trace with hash 1095377953, now seen corresponding path program 2 times [2021-12-06 22:51:30,244 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:30,244 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1075323436] [2021-12-06 22:51:30,244 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-06 22:51:30,245 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:30,245 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:30,245 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:30,246 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-12-06 22:51:30,607 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-06 22:51:30,607 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-06 22:51:30,623 INFO L263 TraceCheckSpWp]: Trace formula consists of 750 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:51:30,625 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:32,196 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-06 22:51:32,196 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:32,196 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:32,196 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1075323436] [2021-12-06 22:51:32,197 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1075323436] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:32,197 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:32,197 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:51:32,197 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1712645365] [2021-12-06 22:51:32,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:32,197 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:51:32,198 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:32,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:51:32,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:32,198 INFO L87 Difference]: Start difference. First operand 6149 states and 9519 transitions. Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:32,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:32,378 INFO L93 Difference]: Finished difference Result 6156 states and 9525 transitions. [2021-12-06 22:51:32,379 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:51:32,379 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 124 [2021-12-06 22:51:32,379 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:32,405 INFO L225 Difference]: With dead ends: 6156 [2021-12-06 22:51:32,405 INFO L226 Difference]: Without dead ends: 6153 [2021-12-06 22:51:32,408 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 122 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:32,408 INFO L933 BasicCegarLoop]: 2916 mSDtfsCounter, 2282 mSDsluCounter, 2224 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2282 SdHoareTripleChecker+Valid, 5140 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:32,408 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2282 Valid, 5140 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:51:32,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6153 states. [2021-12-06 22:51:32,591 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6153 to 6150. [2021-12-06 22:51:32,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6150 states, 4355 states have (on average 1.391963260619977) internal successors, (6062), 4560 states have internal predecessors, (6062), 1436 states have call successors, (1436), 358 states have call predecessors, (1436), 358 states have return successors, (2022), 1327 states have call predecessors, (2022), 1431 states have call successors, (2022) [2021-12-06 22:51:32,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6150 states to 6150 states and 9520 transitions. [2021-12-06 22:51:32,627 INFO L78 Accepts]: Start accepts. Automaton has 6150 states and 9520 transitions. Word has length 124 [2021-12-06 22:51:32,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:32,627 INFO L470 AbstractCegarLoop]: Abstraction has 6150 states and 9520 transitions. [2021-12-06 22:51:32,628 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:32,628 INFO L276 IsEmpty]: Start isEmpty. Operand 6150 states and 9520 transitions. [2021-12-06 22:51:32,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2021-12-06 22:51:32,631 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:32,631 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:32,644 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2021-12-06 22:51:32,831 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:32,832 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:32,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:32,833 INFO L85 PathProgramCache]: Analyzing trace with hash -403552708, now seen corresponding path program 1 times [2021-12-06 22:51:32,835 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:32,835 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [325875756] [2021-12-06 22:51:32,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:32,836 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:32,837 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:32,838 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:32,841 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-12-06 22:51:33,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:33,877 INFO L263 TraceCheckSpWp]: Trace formula consists of 1018 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:51:33,880 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:35,558 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-06 22:51:35,558 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:35,558 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:35,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [325875756] [2021-12-06 22:51:35,559 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [325875756] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:35,559 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:35,559 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:51:35,559 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912364937] [2021-12-06 22:51:35,559 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:35,560 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:51:35,560 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:35,560 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:51:35,560 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:35,560 INFO L87 Difference]: Start difference. First operand 6150 states and 9520 transitions. Second operand has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 2 states have internal predecessors, (52), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:35,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:35,674 INFO L93 Difference]: Finished difference Result 6152 states and 9521 transitions. [2021-12-06 22:51:35,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:51:35,675 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 2 states have internal predecessors, (52), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 125 [2021-12-06 22:51:35,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:35,699 INFO L225 Difference]: With dead ends: 6152 [2021-12-06 22:51:35,700 INFO L226 Difference]: Without dead ends: 6149 [2021-12-06 22:51:35,703 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:35,703 INFO L933 BasicCegarLoop]: 2262 mSDtfsCounter, 2195 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2195 SdHoareTripleChecker+Valid, 2262 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:35,704 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2195 Valid, 2262 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:51:35,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6149 states. [2021-12-06 22:51:35,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6149 to 6149. [2021-12-06 22:51:35,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6149 states, 4355 states have (on average 1.3917336394948334) internal successors, (6061), 4559 states have internal predecessors, (6061), 1435 states have call successors, (1435), 358 states have call predecessors, (1435), 358 states have return successors, (2022), 1327 states have call predecessors, (2022), 1431 states have call successors, (2022) [2021-12-06 22:51:35,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6149 states to 6149 states and 9518 transitions. [2021-12-06 22:51:35,914 INFO L78 Accepts]: Start accepts. Automaton has 6149 states and 9518 transitions. Word has length 125 [2021-12-06 22:51:35,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:35,914 INFO L470 AbstractCegarLoop]: Abstraction has 6149 states and 9518 transitions. [2021-12-06 22:51:35,914 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.333333333333332) internal successors, (52), 2 states have internal predecessors, (52), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:35,914 INFO L276 IsEmpty]: Start isEmpty. Operand 6149 states and 9518 transitions. [2021-12-06 22:51:35,916 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 127 [2021-12-06 22:51:35,917 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:35,917 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:35,932 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (10)] Ended with exit code 0 [2021-12-06 22:51:36,117 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:36,117 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:36,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:36,118 INFO L85 PathProgramCache]: Analyzing trace with hash 374241924, now seen corresponding path program 1 times [2021-12-06 22:51:36,118 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:36,119 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [80368863] [2021-12-06 22:51:36,119 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:36,119 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:36,119 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:36,119 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:36,120 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-12-06 22:51:36,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:36,659 INFO L263 TraceCheckSpWp]: Trace formula consists of 1019 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:51:36,661 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:38,314 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-06 22:51:38,314 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:38,314 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:38,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [80368863] [2021-12-06 22:51:38,314 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [80368863] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:38,314 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:38,314 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 22:51:38,314 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1441138305] [2021-12-06 22:51:38,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:38,315 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:51:38,315 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:38,315 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:51:38,315 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:38,316 INFO L87 Difference]: Start difference. First operand 6149 states and 9518 transitions. Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 2 states have internal predecessors, (53), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:38,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:38,431 INFO L93 Difference]: Finished difference Result 6151 states and 9519 transitions. [2021-12-06 22:51:38,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:51:38,431 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 2 states have internal predecessors, (53), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 126 [2021-12-06 22:51:38,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:38,451 INFO L225 Difference]: With dead ends: 6151 [2021-12-06 22:51:38,451 INFO L226 Difference]: Without dead ends: 6118 [2021-12-06 22:51:38,454 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:38,454 INFO L933 BasicCegarLoop]: 2261 mSDtfsCounter, 2192 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2192 SdHoareTripleChecker+Valid, 2261 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:38,455 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2192 Valid, 2261 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 22:51:38,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6118 states. [2021-12-06 22:51:38,638 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6118 to 6118. [2021-12-06 22:51:38,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6118 states, 4338 states have (on average 1.392346703550023) internal successors, (6040), 4541 states have internal predecessors, (6040), 1422 states have call successors, (1422), 357 states have call predecessors, (1422), 357 states have return successors, (1992), 1315 states have call predecessors, (1992), 1419 states have call successors, (1992) [2021-12-06 22:51:38,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6118 states to 6118 states and 9454 transitions. [2021-12-06 22:51:38,667 INFO L78 Accepts]: Start accepts. Automaton has 6118 states and 9454 transitions. Word has length 126 [2021-12-06 22:51:38,667 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:38,667 INFO L470 AbstractCegarLoop]: Abstraction has 6118 states and 9454 transitions. [2021-12-06 22:51:38,667 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 2 states have internal predecessors, (53), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-06 22:51:38,668 INFO L276 IsEmpty]: Start isEmpty. Operand 6118 states and 9454 transitions. [2021-12-06 22:51:38,677 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2021-12-06 22:51:38,677 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:38,678 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:38,693 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-12-06 22:51:38,878 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:38,879 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:38,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:38,879 INFO L85 PathProgramCache]: Analyzing trace with hash 366302947, now seen corresponding path program 1 times [2021-12-06 22:51:38,880 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:38,880 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [213655656] [2021-12-06 22:51:38,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:38,880 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:38,880 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:38,881 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:38,882 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-12-06 22:51:39,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:39,568 INFO L263 TraceCheckSpWp]: Trace formula consists of 1345 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:51:39,571 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:40,288 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 153 trivial. 0 not checked. [2021-12-06 22:51:40,288 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:40,288 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:40,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [213655656] [2021-12-06 22:51:40,288 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [213655656] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:40,288 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:40,289 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:51:40,289 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1384341295] [2021-12-06 22:51:40,289 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:40,289 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:51:40,289 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:40,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:51:40,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:40,290 INFO L87 Difference]: Start difference. First operand 6118 states and 9454 transitions. Second operand has 3 states, 3 states have (on average 30.0) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 22:51:40,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:40,858 INFO L93 Difference]: Finished difference Result 17333 states and 26857 transitions. [2021-12-06 22:51:40,859 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:51:40,859 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.0) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 188 [2021-12-06 22:51:40,859 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:40,895 INFO L225 Difference]: With dead ends: 17333 [2021-12-06 22:51:40,895 INFO L226 Difference]: Without dead ends: 11238 [2021-12-06 22:51:40,909 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 186 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:40,910 INFO L933 BasicCegarLoop]: 2683 mSDtfsCounter, 1919 mSDsluCounter, 2174 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1919 SdHoareTripleChecker+Valid, 4857 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:40,910 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1919 Valid, 4857 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 22:51:40,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11238 states. [2021-12-06 22:51:41,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11238 to 11212. [2021-12-06 22:51:41,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11212 states, 7936 states have (on average 1.3979334677419355) internal successors, (11094), 8335 states have internal predecessors, (11094), 2598 states have call successors, (2598), 677 states have call predecessors, (2598), 677 states have return successors, (3702), 2387 states have call predecessors, (3702), 2595 states have call successors, (3702) [2021-12-06 22:51:41,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11212 states to 11212 states and 17394 transitions. [2021-12-06 22:51:41,288 INFO L78 Accepts]: Start accepts. Automaton has 11212 states and 17394 transitions. Word has length 188 [2021-12-06 22:51:41,288 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:41,288 INFO L470 AbstractCegarLoop]: Abstraction has 11212 states and 17394 transitions. [2021-12-06 22:51:41,288 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.0) internal successors, (90), 3 states have internal predecessors, (90), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-06 22:51:41,288 INFO L276 IsEmpty]: Start isEmpty. Operand 11212 states and 17394 transitions. [2021-12-06 22:51:41,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 228 [2021-12-06 22:51:41,305 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:41,306 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:41,326 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (12)] Ended with exit code 0 [2021-12-06 22:51:41,506 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:41,506 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:41,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:41,507 INFO L85 PathProgramCache]: Analyzing trace with hash 263051286, now seen corresponding path program 1 times [2021-12-06 22:51:41,508 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:41,508 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [788992700] [2021-12-06 22:51:41,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:41,508 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:41,509 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:41,509 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:41,510 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-12-06 22:51:42,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:42,379 INFO L263 TraceCheckSpWp]: Trace formula consists of 1499 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-06 22:51:42,384 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:43,127 INFO L134 CoverageAnalysis]: Checked inductivity of 234 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 214 trivial. 0 not checked. [2021-12-06 22:51:43,128 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:43,128 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:43,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [788992700] [2021-12-06 22:51:43,128 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [788992700] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:43,128 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:43,128 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 22:51:43,129 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1524717426] [2021-12-06 22:51:43,129 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:43,129 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 22:51:43,129 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:43,130 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 22:51:43,130 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 22:51:43,130 INFO L87 Difference]: Start difference. First operand 11212 states and 17394 transitions. Second operand has 4 states, 4 states have (on average 27.75) internal successors, (111), 4 states have internal predecessors, (111), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 22:51:45,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:45,055 INFO L93 Difference]: Finished difference Result 25054 states and 39320 transitions. [2021-12-06 22:51:45,055 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-06 22:51:45,055 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 27.75) internal successors, (111), 4 states have internal predecessors, (111), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 227 [2021-12-06 22:51:45,056 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:45,111 INFO L225 Difference]: With dead ends: 25054 [2021-12-06 22:51:45,111 INFO L226 Difference]: Without dead ends: 13865 [2021-12-06 22:51:45,162 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 228 GetRequests, 225 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:51:45,163 INFO L933 BasicCegarLoop]: 2595 mSDtfsCounter, 3049 mSDsluCounter, 2328 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 175 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3049 SdHoareTripleChecker+Valid, 4923 SdHoareTripleChecker+Invalid, 297 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 175 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:45,163 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3049 Valid, 4923 Invalid, 297 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [175 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-12-06 22:51:45,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13865 states. [2021-12-06 22:51:45,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13865 to 11226. [2021-12-06 22:51:45,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11226 states, 7950 states have (on average 1.3972327044025157) internal successors, (11108), 8349 states have internal predecessors, (11108), 2598 states have call successors, (2598), 677 states have call predecessors, (2598), 677 states have return successors, (3702), 2387 states have call predecessors, (3702), 2595 states have call successors, (3702) [2021-12-06 22:51:45,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11226 states to 11226 states and 17408 transitions. [2021-12-06 22:51:45,629 INFO L78 Accepts]: Start accepts. Automaton has 11226 states and 17408 transitions. Word has length 227 [2021-12-06 22:51:45,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:45,629 INFO L470 AbstractCegarLoop]: Abstraction has 11226 states and 17408 transitions. [2021-12-06 22:51:45,629 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 27.75) internal successors, (111), 4 states have internal predecessors, (111), 2 states have call successors, (19), 2 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-06 22:51:45,629 INFO L276 IsEmpty]: Start isEmpty. Operand 11226 states and 17408 transitions. [2021-12-06 22:51:45,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 245 [2021-12-06 22:51:45,645 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:45,645 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:45,673 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (13)] Ended with exit code 0 [2021-12-06 22:51:45,846 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:45,846 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:45,847 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:45,847 INFO L85 PathProgramCache]: Analyzing trace with hash 336963770, now seen corresponding path program 1 times [2021-12-06 22:51:45,850 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:45,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [648269273] [2021-12-06 22:51:45,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:45,851 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:45,851 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:45,853 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:45,856 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-12-06 22:51:46,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:46,758 INFO L263 TraceCheckSpWp]: Trace formula consists of 1549 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 22:51:46,762 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:47,678 INFO L134 CoverageAnalysis]: Checked inductivity of 304 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 279 trivial. 0 not checked. [2021-12-06 22:51:47,679 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:47,679 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:47,679 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [648269273] [2021-12-06 22:51:47,679 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [648269273] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:47,679 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:47,679 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:51:47,680 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [956581873] [2021-12-06 22:51:47,680 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:47,680 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:51:47,680 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:47,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:51:47,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:51:47,681 INFO L87 Difference]: Start difference. First operand 11226 states and 17408 transitions. Second operand has 5 states, 5 states have (on average 23.2) internal successors, (116), 4 states have internal predecessors, (116), 2 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 22:51:48,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:48,361 INFO L93 Difference]: Finished difference Result 22453 states and 34827 transitions. [2021-12-06 22:51:48,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:51:48,362 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 4 states have internal predecessors, (116), 2 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) Word has length 244 [2021-12-06 22:51:48,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:48,408 INFO L225 Difference]: With dead ends: 22453 [2021-12-06 22:51:48,408 INFO L226 Difference]: Without dead ends: 11242 [2021-12-06 22:51:48,432 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 243 GetRequests, 240 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:51:48,433 INFO L933 BasicCegarLoop]: 2258 mSDtfsCounter, 0 mSDsluCounter, 6768 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 9026 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:48,433 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 9026 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 22:51:48,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11242 states. [2021-12-06 22:51:48,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11242 to 11234. [2021-12-06 22:51:48,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11234 states, 7954 states have (on average 1.397032939401559) internal successors, (11112), 8357 states have internal predecessors, (11112), 2598 states have call successors, (2598), 677 states have call predecessors, (2598), 681 states have return successors, (3714), 2387 states have call predecessors, (3714), 2595 states have call successors, (3714) [2021-12-06 22:51:48,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11234 states to 11234 states and 17424 transitions. [2021-12-06 22:51:48,831 INFO L78 Accepts]: Start accepts. Automaton has 11234 states and 17424 transitions. Word has length 244 [2021-12-06 22:51:48,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:48,832 INFO L470 AbstractCegarLoop]: Abstraction has 11234 states and 17424 transitions. [2021-12-06 22:51:48,832 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 4 states have internal predecessors, (116), 2 states have call successors, (20), 2 states have call predecessors, (20), 3 states have return successors, (19), 3 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-06 22:51:48,832 INFO L276 IsEmpty]: Start isEmpty. Operand 11234 states and 17424 transitions. [2021-12-06 22:51:48,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 251 [2021-12-06 22:51:48,850 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:48,850 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:48,870 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (14)] Ended with exit code 0 [2021-12-06 22:51:49,051 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:49,051 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:49,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:49,053 INFO L85 PathProgramCache]: Analyzing trace with hash 23506711, now seen corresponding path program 1 times [2021-12-06 22:51:49,056 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:49,056 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [980254839] [2021-12-06 22:51:49,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:49,057 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:49,058 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:49,060 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:49,062 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-12-06 22:51:49,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:49,977 INFO L263 TraceCheckSpWp]: Trace formula consists of 1566 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-06 22:51:50,003 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:50,703 INFO L134 CoverageAnalysis]: Checked inductivity of 328 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 305 trivial. 0 not checked. [2021-12-06 22:51:50,703 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:50,703 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:50,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [980254839] [2021-12-06 22:51:50,703 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [980254839] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:50,703 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:50,704 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:51:50,704 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [152590439] [2021-12-06 22:51:50,704 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:50,704 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:51:50,704 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:50,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:51:50,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:51:50,705 INFO L87 Difference]: Start difference. First operand 11234 states and 17424 transitions. Second operand has 5 states, 5 states have (on average 23.2) internal successors, (116), 4 states have internal predecessors, (116), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 4 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-06 22:51:51,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:51,201 INFO L93 Difference]: Finished difference Result 22517 states and 35711 transitions. [2021-12-06 22:51:51,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 22:51:51,201 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 4 states have internal predecessors, (116), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 4 states have call predecessors, (20), 2 states have call successors, (20) Word has length 250 [2021-12-06 22:51:51,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:51,247 INFO L225 Difference]: With dead ends: 22517 [2021-12-06 22:51:51,247 INFO L226 Difference]: Without dead ends: 11306 [2021-12-06 22:51:51,290 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 249 GetRequests, 246 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:51:51,290 INFO L933 BasicCegarLoop]: 2258 mSDtfsCounter, 4 mSDsluCounter, 6769 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 9027 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:51,290 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4 Valid, 9027 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:51:51,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11306 states. [2021-12-06 22:51:51,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11306 to 11294. [2021-12-06 22:51:51,644 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11294 states, 7998 states have (on average 1.39584896224056) internal successors, (11164), 8401 states have internal predecessors, (11164), 2606 states have call successors, (2606), 677 states have call predecessors, (2606), 689 states have return successors, (3738), 2403 states have call predecessors, (3738), 2603 states have call successors, (3738) [2021-12-06 22:51:51,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11294 states to 11294 states and 17508 transitions. [2021-12-06 22:51:51,684 INFO L78 Accepts]: Start accepts. Automaton has 11294 states and 17508 transitions. Word has length 250 [2021-12-06 22:51:51,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:51,684 INFO L470 AbstractCegarLoop]: Abstraction has 11294 states and 17508 transitions. [2021-12-06 22:51:51,684 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 4 states have internal predecessors, (116), 3 states have call successors, (21), 2 states have call predecessors, (21), 3 states have return successors, (20), 4 states have call predecessors, (20), 2 states have call successors, (20) [2021-12-06 22:51:51,684 INFO L276 IsEmpty]: Start isEmpty. Operand 11294 states and 17508 transitions. [2021-12-06 22:51:51,698 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 251 [2021-12-06 22:51:51,698 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:51,699 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:51,719 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (15)] Ended with exit code 0 [2021-12-06 22:51:51,899 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:51,900 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:51,901 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:51,902 INFO L85 PathProgramCache]: Analyzing trace with hash -1619446350, now seen corresponding path program 1 times [2021-12-06 22:51:51,905 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:51,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1149250875] [2021-12-06 22:51:51,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:51,906 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:51,906 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:51,908 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:51,911 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-12-06 22:51:52,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:52,799 INFO L263 TraceCheckSpWp]: Trace formula consists of 1564 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:51:52,802 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:54,361 INFO L134 CoverageAnalysis]: Checked inductivity of 328 backedges. 111 proven. 0 refuted. 0 times theorem prover too weak. 217 trivial. 0 not checked. [2021-12-06 22:51:54,361 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:54,361 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:54,361 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1149250875] [2021-12-06 22:51:54,361 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1149250875] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:54,361 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:54,362 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:51:54,362 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [432610507] [2021-12-06 22:51:54,362 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:54,362 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:51:54,362 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:54,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:51:54,363 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:54,363 INFO L87 Difference]: Start difference. First operand 11294 states and 17508 transitions. Second operand has 3 states, 3 states have (on average 41.333333333333336) internal successors, (124), 3 states have internal predecessors, (124), 3 states have call successors, (23), 3 states have call predecessors, (23), 2 states have return successors, (22), 2 states have call predecessors, (22), 2 states have call successors, (22) [2021-12-06 22:51:55,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:55,110 INFO L93 Difference]: Finished difference Result 33403 states and 51775 transitions. [2021-12-06 22:51:55,111 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:51:55,111 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 41.333333333333336) internal successors, (124), 3 states have internal predecessors, (124), 3 states have call successors, (23), 3 states have call predecessors, (23), 2 states have return successors, (22), 2 states have call predecessors, (22), 2 states have call successors, (22) Word has length 250 [2021-12-06 22:51:55,112 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:55,188 INFO L225 Difference]: With dead ends: 33403 [2021-12-06 22:51:55,188 INFO L226 Difference]: Without dead ends: 22109 [2021-12-06 22:51:55,221 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 249 GetRequests, 248 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:55,221 INFO L933 BasicCegarLoop]: 3868 mSDtfsCounter, 2093 mSDsluCounter, 2210 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2093 SdHoareTripleChecker+Valid, 6078 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:55,222 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2093 Valid, 6078 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:51:55,238 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22109 states. [2021-12-06 22:51:55,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22109 to 22103. [2021-12-06 22:51:56,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22103 states, 15682 states have (on average 1.3971432215278663) internal successors, (21910), 16465 states have internal predecessors, (21910), 5068 states have call successors, (5068), 1328 states have call predecessors, (5068), 1352 states have return successors, (7230), 4665 states have call predecessors, (7230), 5065 states have call successors, (7230) [2021-12-06 22:51:56,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22103 states to 22103 states and 34208 transitions. [2021-12-06 22:51:56,083 INFO L78 Accepts]: Start accepts. Automaton has 22103 states and 34208 transitions. Word has length 250 [2021-12-06 22:51:56,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:51:56,084 INFO L470 AbstractCegarLoop]: Abstraction has 22103 states and 34208 transitions. [2021-12-06 22:51:56,084 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 41.333333333333336) internal successors, (124), 3 states have internal predecessors, (124), 3 states have call successors, (23), 3 states have call predecessors, (23), 2 states have return successors, (22), 2 states have call predecessors, (22), 2 states have call successors, (22) [2021-12-06 22:51:56,084 INFO L276 IsEmpty]: Start isEmpty. Operand 22103 states and 34208 transitions. [2021-12-06 22:51:56,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 291 [2021-12-06 22:51:56,112 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:51:56,113 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:51:56,133 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-12-06 22:51:56,313 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:51:56,314 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:51:56,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:51:56,315 INFO L85 PathProgramCache]: Analyzing trace with hash 22523920, now seen corresponding path program 1 times [2021-12-06 22:51:56,319 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:51:56,319 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [653422309] [2021-12-06 22:51:56,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:51:56,320 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:51:56,321 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:51:56,322 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:51:56,325 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-12-06 22:51:57,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:51:57,271 INFO L263 TraceCheckSpWp]: Trace formula consists of 1830 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:51:57,275 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:51:58,727 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 141 trivial. 0 not checked. [2021-12-06 22:51:58,727 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:51:58,727 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:51:58,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [653422309] [2021-12-06 22:51:58,728 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [653422309] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:51:58,728 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:51:58,728 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:51:58,728 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [736465394] [2021-12-06 22:51:58,728 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:51:58,729 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:51:58,729 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:51:58,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:51:58,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:58,729 INFO L87 Difference]: Start difference. First operand 22103 states and 34208 transitions. Second operand has 3 states, 3 states have (on average 55.333333333333336) internal successors, (166), 3 states have internal predecessors, (166), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:51:59,512 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:51:59,512 INFO L93 Difference]: Finished difference Result 44141 states and 68297 transitions. [2021-12-06 22:51:59,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:51:59,513 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 55.333333333333336) internal successors, (166), 3 states have internal predecessors, (166), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) Word has length 290 [2021-12-06 22:51:59,513 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:51:59,588 INFO L225 Difference]: With dead ends: 44141 [2021-12-06 22:51:59,588 INFO L226 Difference]: Without dead ends: 22071 [2021-12-06 22:51:59,646 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 288 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:51:59,647 INFO L933 BasicCegarLoop]: 2254 mSDtfsCounter, 2242 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2242 SdHoareTripleChecker+Valid, 2254 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:51:59,647 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2242 Valid, 2254 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:51:59,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22071 states. [2021-12-06 22:52:00,483 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22071 to 22071. [2021-12-06 22:52:00,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22071 states, 15666 states have (on average 1.3965275118090132) internal successors, (21878), 16449 states have internal predecessors, (21878), 5052 states have call successors, (5052), 1328 states have call predecessors, (5052), 1352 states have return successors, (7182), 4649 states have call predecessors, (7182), 5049 states have call successors, (7182) [2021-12-06 22:52:00,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22071 states to 22071 states and 34112 transitions. [2021-12-06 22:52:00,575 INFO L78 Accepts]: Start accepts. Automaton has 22071 states and 34112 transitions. Word has length 290 [2021-12-06 22:52:00,576 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:00,576 INFO L470 AbstractCegarLoop]: Abstraction has 22071 states and 34112 transitions. [2021-12-06 22:52:00,576 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 55.333333333333336) internal successors, (166), 3 states have internal predecessors, (166), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:52:00,576 INFO L276 IsEmpty]: Start isEmpty. Operand 22071 states and 34112 transitions. [2021-12-06 22:52:00,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 289 [2021-12-06 22:52:00,603 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:00,603 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:00,627 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (17)] Ended with exit code 0 [2021-12-06 22:52:00,803 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:52:00,804 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:00,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:00,806 INFO L85 PathProgramCache]: Analyzing trace with hash -1591771139, now seen corresponding path program 1 times [2021-12-06 22:52:00,811 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:52:00,811 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [18868054] [2021-12-06 22:52:00,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:00,812 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:52:00,812 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:52:00,814 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:52:00,817 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-12-06 22:52:01,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:01,824 INFO L263 TraceCheckSpWp]: Trace formula consists of 1826 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:52:01,828 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:52:03,271 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 141 trivial. 0 not checked. [2021-12-06 22:52:03,272 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:52:03,272 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:52:03,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [18868054] [2021-12-06 22:52:03,272 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [18868054] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:03,272 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:03,272 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:52:03,273 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1282057297] [2021-12-06 22:52:03,273 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:03,273 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:52:03,273 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:52:03,274 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:52:03,274 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:52:03,274 INFO L87 Difference]: Start difference. First operand 22071 states and 34112 transitions. Second operand has 3 states, 3 states have (on average 54.666666666666664) internal successors, (164), 3 states have internal predecessors, (164), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:52:04,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:04,136 INFO L93 Difference]: Finished difference Result 44077 states and 68105 transitions. [2021-12-06 22:52:04,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:52:04,137 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 54.666666666666664) internal successors, (164), 3 states have internal predecessors, (164), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) Word has length 288 [2021-12-06 22:52:04,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:04,204 INFO L225 Difference]: With dead ends: 44077 [2021-12-06 22:52:04,205 INFO L226 Difference]: Without dead ends: 22039 [2021-12-06 22:52:04,251 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 287 GetRequests, 286 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:52:04,252 INFO L933 BasicCegarLoop]: 2250 mSDtfsCounter, 2240 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2240 SdHoareTripleChecker+Valid, 2250 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:04,252 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2240 Valid, 2250 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:52:04,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22039 states. [2021-12-06 22:52:05,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22039 to 22039. [2021-12-06 22:52:05,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22039 states, 15650 states have (on average 1.3959105431309904) internal successors, (21846), 16433 states have internal predecessors, (21846), 5036 states have call successors, (5036), 1328 states have call predecessors, (5036), 1352 states have return successors, (7134), 4633 states have call predecessors, (7134), 5033 states have call successors, (7134) [2021-12-06 22:52:05,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22039 states to 22039 states and 34016 transitions. [2021-12-06 22:52:05,235 INFO L78 Accepts]: Start accepts. Automaton has 22039 states and 34016 transitions. Word has length 288 [2021-12-06 22:52:05,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:05,235 INFO L470 AbstractCegarLoop]: Abstraction has 22039 states and 34016 transitions. [2021-12-06 22:52:05,235 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 54.666666666666664) internal successors, (164), 3 states have internal predecessors, (164), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:52:05,235 INFO L276 IsEmpty]: Start isEmpty. Operand 22039 states and 34016 transitions. [2021-12-06 22:52:05,261 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2021-12-06 22:52:05,262 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:05,262 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:05,295 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (18)] Ended with exit code 0 [2021-12-06 22:52:05,462 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:52:05,463 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:05,464 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:05,465 INFO L85 PathProgramCache]: Analyzing trace with hash -1735853594, now seen corresponding path program 1 times [2021-12-06 22:52:05,468 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:52:05,469 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [709475277] [2021-12-06 22:52:05,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:05,469 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:52:05,470 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:52:05,472 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:52:05,474 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (19)] Waiting until timeout for monitored process [2021-12-06 22:52:06,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:06,491 INFO L263 TraceCheckSpWp]: Trace formula consists of 1832 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:52:06,494 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:52:07,972 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 141 trivial. 0 not checked. [2021-12-06 22:52:07,972 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:52:07,972 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:52:07,972 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [709475277] [2021-12-06 22:52:07,972 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [709475277] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:07,972 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:07,973 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:52:07,973 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1820276622] [2021-12-06 22:52:07,973 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:07,973 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:52:07,973 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:52:07,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:52:07,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:52:07,974 INFO L87 Difference]: Start difference. First operand 22039 states and 34016 transitions. Second operand has 3 states, 3 states have (on average 55.666666666666664) internal successors, (167), 3 states have internal predecessors, (167), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:52:08,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:08,872 INFO L93 Difference]: Finished difference Result 44013 states and 67913 transitions. [2021-12-06 22:52:08,873 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:52:08,873 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 55.666666666666664) internal successors, (167), 3 states have internal predecessors, (167), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) Word has length 291 [2021-12-06 22:52:08,874 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:08,934 INFO L225 Difference]: With dead ends: 44013 [2021-12-06 22:52:08,934 INFO L226 Difference]: Without dead ends: 22007 [2021-12-06 22:52:08,976 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 290 GetRequests, 289 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:52:08,976 INFO L933 BasicCegarLoop]: 2246 mSDtfsCounter, 2233 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2233 SdHoareTripleChecker+Valid, 2246 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:08,976 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2233 Valid, 2246 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:52:08,989 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22007 states. [2021-12-06 22:52:09,739 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22007 to 22007. [2021-12-06 22:52:09,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22007 states, 15634 states have (on average 1.395292311628502) internal successors, (21814), 16417 states have internal predecessors, (21814), 5020 states have call successors, (5020), 1328 states have call predecessors, (5020), 1352 states have return successors, (7086), 4617 states have call predecessors, (7086), 5017 states have call successors, (7086) [2021-12-06 22:52:09,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22007 states to 22007 states and 33920 transitions. [2021-12-06 22:52:09,827 INFO L78 Accepts]: Start accepts. Automaton has 22007 states and 33920 transitions. Word has length 291 [2021-12-06 22:52:09,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:09,827 INFO L470 AbstractCegarLoop]: Abstraction has 22007 states and 33920 transitions. [2021-12-06 22:52:09,828 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 55.666666666666664) internal successors, (167), 3 states have internal predecessors, (167), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:52:09,828 INFO L276 IsEmpty]: Start isEmpty. Operand 22007 states and 33920 transitions. [2021-12-06 22:52:09,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 290 [2021-12-06 22:52:09,851 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:09,852 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:09,877 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (19)] Ended with exit code 0 [2021-12-06 22:52:10,052 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:52:10,054 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:10,054 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:10,055 INFO L85 PathProgramCache]: Analyzing trace with hash 74188019, now seen corresponding path program 1 times [2021-12-06 22:52:10,058 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:52:10,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2097237544] [2021-12-06 22:52:10,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:10,060 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:52:10,060 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:52:10,062 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:52:10,065 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (20)] Waiting until timeout for monitored process [2021-12-06 22:52:10,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:10,984 INFO L263 TraceCheckSpWp]: Trace formula consists of 1828 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-06 22:52:10,988 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:52:12,500 INFO L134 CoverageAnalysis]: Checked inductivity of 178 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 141 trivial. 0 not checked. [2021-12-06 22:52:12,500 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:52:12,501 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:52:12,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2097237544] [2021-12-06 22:52:12,501 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2097237544] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:12,501 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:12,501 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 22:52:12,501 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1871351070] [2021-12-06 22:52:12,501 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:12,502 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 22:52:12,502 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:52:12,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 22:52:12,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:52:12,503 INFO L87 Difference]: Start difference. First operand 22007 states and 33920 transitions. Second operand has 3 states, 3 states have (on average 55.0) internal successors, (165), 3 states have internal predecessors, (165), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:52:13,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:13,562 INFO L93 Difference]: Finished difference Result 43949 states and 67721 transitions. [2021-12-06 22:52:13,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 22:52:13,562 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 55.0) internal successors, (165), 3 states have internal predecessors, (165), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) Word has length 289 [2021-12-06 22:52:13,562 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:13,632 INFO L225 Difference]: With dead ends: 43949 [2021-12-06 22:52:13,632 INFO L226 Difference]: Without dead ends: 21975 [2021-12-06 22:52:13,686 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 287 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 22:52:13,687 INFO L933 BasicCegarLoop]: 2242 mSDtfsCounter, 2231 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2231 SdHoareTripleChecker+Valid, 2242 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:13,687 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2231 Valid, 2242 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 22:52:13,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21975 states. [2021-12-06 22:52:14,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21975 to 21975. [2021-12-06 22:52:14,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21975 states, 15618 states have (on average 1.3946728134204123) internal successors, (21782), 16401 states have internal predecessors, (21782), 5004 states have call successors, (5004), 1328 states have call predecessors, (5004), 1352 states have return successors, (7038), 4601 states have call predecessors, (7038), 5001 states have call successors, (7038) [2021-12-06 22:52:14,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21975 states to 21975 states and 33824 transitions. [2021-12-06 22:52:14,599 INFO L78 Accepts]: Start accepts. Automaton has 21975 states and 33824 transitions. Word has length 289 [2021-12-06 22:52:14,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:14,599 INFO L470 AbstractCegarLoop]: Abstraction has 21975 states and 33824 transitions. [2021-12-06 22:52:14,599 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 55.0) internal successors, (165), 3 states have internal predecessors, (165), 2 states have call successors, (34), 2 states have call predecessors, (34), 2 states have return successors, (33), 2 states have call predecessors, (33), 2 states have call successors, (33) [2021-12-06 22:52:14,599 INFO L276 IsEmpty]: Start isEmpty. Operand 21975 states and 33824 transitions. [2021-12-06 22:52:14,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 277 [2021-12-06 22:52:14,654 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:14,654 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:14,679 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (20)] Ended with exit code 0 [2021-12-06 22:52:14,855 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:52:14,856 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:14,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:14,857 INFO L85 PathProgramCache]: Analyzing trace with hash 1080683998, now seen corresponding path program 1 times [2021-12-06 22:52:14,860 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:52:14,861 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [63966304] [2021-12-06 22:52:14,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:14,862 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:52:14,862 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:52:14,864 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:52:14,866 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (21)] Waiting until timeout for monitored process [2021-12-06 22:52:15,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 22:52:15,747 INFO L263 TraceCheckSpWp]: Trace formula consists of 1667 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-06 22:52:15,751 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 22:52:16,839 INFO L134 CoverageAnalysis]: Checked inductivity of 285 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 243 trivial. 0 not checked. [2021-12-06 22:52:16,839 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-06 22:52:16,839 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-06 22:52:16,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [63966304] [2021-12-06 22:52:16,839 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [63966304] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 22:52:16,839 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 22:52:16,839 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 22:52:16,840 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [717678432] [2021-12-06 22:52:16,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 22:52:16,840 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 22:52:16,840 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-06 22:52:16,841 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 22:52:16,841 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 22:52:16,841 INFO L87 Difference]: Start difference. First operand 21975 states and 33824 transitions. Second operand has 5 states, 5 states have (on average 26.2) internal successors, (131), 5 states have internal predecessors, (131), 3 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 3 states have call predecessors, (25), 3 states have call successors, (25) [2021-12-06 22:52:17,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 22:52:17,695 INFO L93 Difference]: Finished difference Result 35639 states and 54650 transitions. [2021-12-06 22:52:17,696 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 22:52:17,696 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 26.2) internal successors, (131), 5 states have internal predecessors, (131), 3 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 3 states have call predecessors, (25), 3 states have call successors, (25) Word has length 276 [2021-12-06 22:52:17,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 22:52:17,741 INFO L225 Difference]: With dead ends: 35639 [2021-12-06 22:52:17,741 INFO L226 Difference]: Without dead ends: 13515 [2021-12-06 22:52:17,789 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 277 GetRequests, 272 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-06 22:52:17,790 INFO L933 BasicCegarLoop]: 2243 mSDtfsCounter, 15 mSDsluCounter, 6698 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 8941 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-06 22:52:17,790 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 8941 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-06 22:52:17,800 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13515 states. [2021-12-06 22:52:18,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13515 to 13505. [2021-12-06 22:52:18,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13505 states, 9584 states have (on average 1.3925292153589315) internal successors, (13346), 10070 states have internal predecessors, (13346), 3076 states have call successors, (3076), 829 states have call predecessors, (3076), 844 states have return successors, (4164), 2821 states have call predecessors, (4164), 3073 states have call successors, (4164) [2021-12-06 22:52:18,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13505 states to 13505 states and 20586 transitions. [2021-12-06 22:52:18,381 INFO L78 Accepts]: Start accepts. Automaton has 13505 states and 20586 transitions. Word has length 276 [2021-12-06 22:52:18,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 22:52:18,381 INFO L470 AbstractCegarLoop]: Abstraction has 13505 states and 20586 transitions. [2021-12-06 22:52:18,381 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 26.2) internal successors, (131), 5 states have internal predecessors, (131), 3 states have call successors, (26), 2 states have call predecessors, (26), 2 states have return successors, (25), 3 states have call predecessors, (25), 3 states have call successors, (25) [2021-12-06 22:52:18,381 INFO L276 IsEmpty]: Start isEmpty. Operand 13505 states and 20586 transitions. [2021-12-06 22:52:18,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 326 [2021-12-06 22:52:18,401 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 22:52:18,401 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:18,422 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (21)] Ended with exit code 0 [2021-12-06 22:52:18,602 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:52:18,603 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 22:52:18,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 22:52:18,605 INFO L85 PathProgramCache]: Analyzing trace with hash 192789217, now seen corresponding path program 1 times [2021-12-06 22:52:18,608 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-06 22:52:18,608 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1025267631] [2021-12-06 22:52:18,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 22:52:18,609 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-06 22:52:18,610 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat [2021-12-06 22:52:18,611 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-06 22:52:18,612 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (22)] Waiting until timeout for monitored process [2021-12-06 22:52:29,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 22:52:29,435 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-06 22:52:36,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-06 22:52:38,309 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-06 22:52:38,310 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-06 22:52:38,310 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 22:52:38,349 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 (22)] Forceful destruction successful, exit code 0 [2021-12-06 22:52:38,512 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/mathsat -unsat_core_generation=3 [2021-12-06 22:52:38,520 INFO L732 BasicCegarLoop]: Path program histogram: [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 22:52:38,523 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 22:52:38,593 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 22:52:38,597 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-06 22:52:39,009 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 10:52:39 BoogieIcfgContainer [2021-12-06 22:52:39,009 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 22:52:39,009 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 22:52:39,009 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 22:52:39,010 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 22:52:39,010 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 10:50:59" (3/4) ... [2021-12-06 22:52:39,012 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-06 22:52:39,012 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 22:52:39,012 INFO L158 Benchmark]: Toolchain (without parser) took 149323.15ms. Allocated memory was 52.4MB in the beginning and 2.8GB in the end (delta: 2.8GB). Free memory was 27.1MB in the beginning and 1.7GB in the end (delta: -1.7GB). Peak memory consumption was 1.1GB. Max. memory is 16.1GB. [2021-12-06 22:52:39,013 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 52.4MB. Free memory was 32.5MB in the beginning and 32.4MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:52:39,013 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2044.16ms. Allocated memory was 52.4MB in the beginning and 117.4MB in the end (delta: 65.0MB). Free memory was 27.0MB in the beginning and 61.4MB in the end (delta: -34.4MB). Peak memory consumption was 67.6MB. Max. memory is 16.1GB. [2021-12-06 22:52:39,013 INFO L158 Benchmark]: Boogie Procedure Inliner took 153.80ms. Allocated memory is still 117.4MB. Free memory was 61.4MB in the beginning and 36.7MB in the end (delta: 24.6MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2021-12-06 22:52:39,014 INFO L158 Benchmark]: Boogie Preprocessor took 201.68ms. Allocated memory was 117.4MB in the beginning and 199.2MB in the end (delta: 81.8MB). Free memory was 36.7MB in the beginning and 104.5MB in the end (delta: -67.7MB). Peak memory consumption was 13.0MB. Max. memory is 16.1GB. [2021-12-06 22:52:39,014 INFO L158 Benchmark]: RCFGBuilder took 47409.08ms. Allocated memory is still 199.2MB. Free memory was 104.5MB in the beginning and 95.3MB in the end (delta: 9.1MB). Peak memory consumption was 60.6MB. Max. memory is 16.1GB. [2021-12-06 22:52:39,014 INFO L158 Benchmark]: TraceAbstraction took 99506.25ms. Allocated memory was 199.2MB in the beginning and 2.8GB in the end (delta: 2.6GB). Free memory was 95.3MB in the beginning and 1.7GB in the end (delta: -1.6GB). Peak memory consumption was 1.9GB. Max. memory is 16.1GB. [2021-12-06 22:52:39,014 INFO L158 Benchmark]: Witness Printer took 2.71ms. Allocated memory is still 2.8GB. Free memory is still 1.7GB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 22:52:39,016 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 52.4MB. Free memory was 32.5MB in the beginning and 32.4MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2044.16ms. Allocated memory was 52.4MB in the beginning and 117.4MB in the end (delta: 65.0MB). Free memory was 27.0MB in the beginning and 61.4MB in the end (delta: -34.4MB). Peak memory consumption was 67.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 153.80ms. Allocated memory is still 117.4MB. Free memory was 61.4MB in the beginning and 36.7MB in the end (delta: 24.6MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 201.68ms. Allocated memory was 117.4MB in the beginning and 199.2MB in the end (delta: 81.8MB). Free memory was 36.7MB in the beginning and 104.5MB in the end (delta: -67.7MB). Peak memory consumption was 13.0MB. Max. memory is 16.1GB. * RCFGBuilder took 47409.08ms. Allocated memory is still 199.2MB. Free memory was 104.5MB in the beginning and 95.3MB in the end (delta: 9.1MB). Peak memory consumption was 60.6MB. Max. memory is 16.1GB. * TraceAbstraction took 99506.25ms. Allocated memory was 199.2MB in the beginning and 2.8GB in the end (delta: 2.6GB). Free memory was 95.3MB in the beginning and 1.7GB in the end (delta: -1.6GB). Peak memory consumption was 1.9GB. Max. memory is 16.1GB. * Witness Printer took 2.71ms. Allocated memory is still 2.8GB. Free memory is still 1.7GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8156]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6869. Possible FailurePath: [L4312] int ldv_timer_state_5 = 0; [L4313] int ldv_state_variable_8 ; [L4314] struct timer_list *ldv_timer_list_5 ; [L4315] struct timer_list *ldv_timer_list_4 ; [L4316] struct work_struct *ldv_work_struct_3_1 ; [L4317] struct mmc_host *vub300_mmc_ops_group0 ; [L4318] struct work_struct *ldv_work_struct_1_3 ; [L4319] int ldv_state_variable_0 ; [L4320] int ldv_state_variable_5 ; [L4321] int ldv_work_1_1 ; [L4322] int ldv_work_3_2 ; [L4323] int ldv_work_3_0 ; [L4324] struct work_struct *ldv_work_struct_2_3 ; [L4325] struct work_struct *ldv_work_struct_2_0 ; [L4326] int ldv_timer_state_6 = 0; [L4327] struct work_struct *ldv_work_struct_2_2 ; [L4328] int ldv_timer_state_4 = 0; [L4329] int ref_cnt ; [L4330] int ldv_work_3_3 ; [L4331] int ldv_state_variable_1 ; [L4332] int ldv_state_variable_7 ; [L4333] struct work_struct *ldv_work_struct_3_3 ; [L4334] struct work_struct *ldv_work_struct_1_0 ; [L4335] struct work_struct *ldv_work_struct_1_1 ; [L4336] int ldv_work_1_3 ; [L4337] struct work_struct *ldv_work_struct_2_1 ; [L4338] struct timer_list *ldv_timer_list_6 ; [L4339] struct work_struct *ldv_work_struct_3_2 ; [L4340] int ldv_state_variable_6 ; [L4341] int ldv_work_3_1 ; [L4342] int ldv_state_variable_2 ; [L4343] int ldv_work_2_0 ; [L4344] int usb_counter ; [L4345] struct work_struct *ldv_work_struct_3_0 ; [L4346] int ldv_work_1_2 ; [L4347] int LDV_IN_INTERRUPT = 1; [L4348] struct work_struct *ldv_work_struct_1_2 ; [L4349] int ldv_work_2_2 ; [L4350] int ldv_state_variable_3 ; [L4351] struct usb_interface *vub300_driver_group1 ; [L4352] int ldv_work_1_0 ; [L4353] int ldv_work_2_3 ; [L4354] int ldv_state_variable_4 ; [L4355] int ldv_work_2_1 ; [L4416] static bool limit_speed_to_24_MHz ; [L4417] static bool pad_input_to_usb_pkt ; [L4418] static bool disable_offload_processing ; [L4419] static bool force_1_bit_data_xfers ; [L4420] static bool force_polling_for_irqs ; [L4421] static int firmware_irqpoll_timeout = 1024; [L4422] static int force_max_req_size = 128; [L4423] static int firmware_rom_wait_states = 28; [L4424-L4429] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4430] struct usb_device_id const __mod_usb_device_table ; [L4431] static struct workqueue_struct *cmndworkqueue ; [L4432] static struct workqueue_struct *pollworkqueue ; [L4433] static struct workqueue_struct *deadworkqueue ; [L6419-L6421] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6829-L6835] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6908] int ldv_retval_0 ; [L6910] int ldv_retval_1 ; [L6913] int ldv_retval_3 ; [L6914] int ldv_retval_2 ; [L8159] int INTERF_STATE = 0; [L8160] int SERIAL_STATE = 0; [L8161] void *usb_intfdata = (void *)0; [L8162] struct urb *usb_urb = (struct urb *)0; [L8163] struct usb_device *usb_dev = (struct usb_device *)0; [L8164] int dev_counter = 0; [L8165] int completeFnIntCounter = 0; [L8166] int completeFnBulkCounter = 0; [L8167] void (*completeFnInt)(struct urb * ) ; [L8168] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7553] struct usb_device_id *ldvarg1 ; [L7554] void *tmp ; [L7555] pm_message_t ldvarg0 ; [L7556] struct mmc_card *ldvarg4 ; [L7557] void *tmp___0 ; [L7558] struct mmc_ios *ldvarg3 ; [L7559] void *tmp___1 ; [L7560] int ldvarg5 ; [L7561] struct mmc_request *ldvarg2 ; [L7562] void *tmp___2 ; [L7563] int tmp___3 ; [L7564] int tmp___4 ; [L7565] int tmp___5 ; [L7566] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7568] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={135107988821114615:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={135107988821114615:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={135107988821114615:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={135107988821114615:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={135107988821114615:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={135107988821114615:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={135107988821114615:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={135107988821114615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={135107988821114615:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={135107988821114615:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={135107988821114615:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7568] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={135107988821114615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7568] tmp = ldv_init_zalloc(32UL) [L7569] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7570] CALL, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4602643634797792934:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4602643634797792934:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4602643634797792934:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={4602643634797792934:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4602643634797792934:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4602643634797792934:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={4602643634797792934:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=1816, \result={4602643634797792934:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4602643634797792934:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4602643634797792934:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={4602643634797792934:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7570] RET, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1816UL)={4602643634797792934:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7570] tmp___0 = ldv_init_zalloc(1816UL) [L7571] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7572] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={3918131675799748183:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={3918131675799748183:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3918131675799748183:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={3918131675799748183:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={3918131675799748183:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3918131675799748183:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={3918131675799748183:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={3918131675799748183:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={3918131675799748183:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3918131675799748183:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={3918131675799748183:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7572] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={3918131675799748183:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7572] tmp___1 = ldv_init_zalloc(16UL) [L7573] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4602643634797791778:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4602643634797791778:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4602643634797791778:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={4602643634797791778:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4602643634797791778:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4602643634797791778:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={4602643634797791778:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={4602643634797791778:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4602643634797791778:0}, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4602643634797791778:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={4602643634797791778:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={4602643634797791778:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] tmp___2 = ldv_init_zalloc(136UL) [L7575] ldvarg2 = (struct mmc_request *)tmp___2 [L7576] FCALL ldv_initialize() [L7577] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-9223372036854775678:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-9223372036854775678:0}, s={-9223372036854775678:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4279] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-9223372036854775678:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-9223372036854775678:0}, s={-9223372036854775678:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4279] tmp = memset(s, c, n) [L4280] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-9223372036854775678:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-9223372036854775678:0}, s={-9223372036854775678:0}, SERIAL_STATE=0, tmp={-9223372036854775678:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7577] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={-9223372036854775678:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={9214364837600034801:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={9214364837600034801:0}, s={9214364837600034801:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4279] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={9214364837600034801:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={9214364837600034801:0}, s={9214364837600034801:0}, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4279] tmp = memset(s, c, n) [L4280] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={9214364837600034801:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={9214364837600034801:0}, s={9214364837600034801:0}, SERIAL_STATE=0, tmp={9214364837600034801:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={9214364837600034801:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7579] ldv_state_variable_6 = 1 [L7580] CALL work_init_3() [L6918] ldv_work_3_0 = 0 [L6919] ldv_work_3_1 = 0 [L6920] ldv_work_3_2 = 0 [L6921] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] RET work_init_3() [L7581] ldv_state_variable_3 = 1 [L7582] ldv_state_variable_7 = 0 [L7583] CALL work_init_2() [L6968] ldv_work_2_0 = 0 [L6969] ldv_work_2_1 = 0 [L6970] ldv_work_2_2 = 0 [L6971] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7583] RET work_init_2() [L7584] ldv_state_variable_2 = 1 [L7585] ldv_state_variable_8 = 0 [L7586] CALL work_init_1() [L7336] ldv_work_1_0 = 0 [L7337] ldv_work_1_1 = 0 [L7338] ldv_work_1_2 = 0 [L7339] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7586] RET work_init_1() [L7587] ldv_state_variable_1 = 1 [L7588] ldv_state_variable_4 = 1 [L7589] ref_cnt = 0 [L7590] ldv_state_variable_0 = 1 [L7591] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7593] tmp___3 = __VERIFIER_nondet_int() [L7595] case 0: [L7601] case 1: [L7607] case 2: [L7670] case 3: [L7676] case 4: [L7722] case 5: [L7728] case 6: [L7734] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, tmp___3=7, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7735] COND TRUE ldv_state_variable_0 != 0 [L7736] tmp___6 = __VERIFIER_nondet_int() [L7738] case 0: [L7746] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, tmp___3=7, tmp___6=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7747] COND TRUE ldv_state_variable_0 == 1 [L7748] CALL, EXPR vub300_init() [L6838] int result ; [L6839] struct lock_class_key __key ; [L6840] char const *__lock_name ; [L6841] struct workqueue_struct *tmp ; [L6842] struct lock_class_key __key___0 ; [L6843] char const *__lock_name___0 ; [L6844] struct workqueue_struct *tmp___0 ; [L6845] struct lock_class_key __key___1 ; [L6846] char const *__lock_name___1 ; [L6847] struct workqueue_struct *tmp___1 ; [L6851] __lock_name = "kvub300c" [L6852] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6853] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-9223372036854775808:0}, __key={4602678819171977858:0}, __key___0={4602678819169893906:0}, __key___1={4602678819172646449:0}, __lock_name={73:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854775808:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6854] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6860] __lock_name___0 = "kvub300p" [L6861] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6862] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-9223372036854775808:0}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={0:-9223372036854775808}, __key={4602678819171977858:0}, __key___0={4602678819169893906:0}, __key___1={4602678819172646449:0}, __lock_name={73:0}, __lock_name___0={76:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:0}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854775808:0}, tmp___0={0:-9223372036854775808}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6863] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6869] __lock_name___1 = "kvub300d" [L6870] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6871] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-9223372036854775808:0}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={0:-9223372036854775808}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={0:-9223372036854775808}, __key={4602678819171977858:0}, __key___0={4602678819169893906:0}, __key___1={4602678819172646449:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036854775808:0}, tmp___0={0:-9223372036854775808}, tmp___1={0:-9223372036854775808}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6872] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6878] CALL, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L8061] ldv_func_ret_type___9 ldv_func_res ; [L8062] int tmp ; [L8064] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8549] return __VERIFIER_nondet_int(); [L8064] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8064] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8065] ldv_func_res = tmp [L8066] ldv_state_variable_7 = 1 [L8067] usb_counter = 0 [L8068] CALL ldv_usb_driver_7() [L7207] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7209] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, calloc(1UL, size)={4026182882494381586:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, calloc(1UL, size)={4026182882494381586:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4026182882494381586:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={4026182882494381586:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, calloc(1UL, size)={4026182882494381586:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4026182882494381586:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={4026182882494381586:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={4026182882494381586:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, calloc(1UL, size)={4026182882494381586:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4026182882494381586:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={4026182882494381586:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7209] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={4026182882494381586:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7209] tmp = ldv_init_zalloc(1288UL) [L7210] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={4026182882494381586:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L8068] RET ldv_usb_driver_7() [L8069] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={86:0}, ldv_func_arg1={86:0}, ldv_func_arg2={94:93}, ldv_func_arg2={94:93}, ldv_func_arg3={82:0}, ldv_func_arg3={82:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6878] RET, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6878] result = ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6879] COND FALSE !(result != 0) [L6884] return (0); [L6884] return (0); [L6884] return (0); [L6884] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-9223372036854775808:0}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={0:-9223372036854775808}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={0:-9223372036854775808}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={-9223372036854775808:0}, tmp___0={0:-9223372036854775808}, tmp___1={0:-9223372036854775808}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7748] RET, EXPR vub300_init() [L7748] ldv_retval_3 = vub300_init() [L7749] COND TRUE ldv_retval_3 == 0 [L7750] ldv_state_variable_0 = 3 [L7751] ldv_state_variable_8 = 1 [L7752] CALL ldv_initialize_mmc_host_ops_8() [L7187] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7189] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4266] void *p ; [L4267] void *tmp ; [L4269] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, calloc(1UL, size)={144115188088438390:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4269] tmp = calloc(1UL, size) [L4270] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, calloc(1UL, size)={144115188088438390:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={144115188088438390:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={144115188088438390:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4271] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, calloc(1UL, size)={144115188088438390:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={144115188088438390:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={144115188088438390:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={144115188088438390:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, calloc(1UL, size)={144115188088438390:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={144115188088438390:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={144115188088438390:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7189] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={144115188088438390:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7189] tmp = ldv_init_zalloc(2624UL) [L7190] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={144115188088438390:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7752] RET ldv_initialize_mmc_host_ops_8() [L7755] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, tmp___3=7, tmp___6=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7593] tmp___3 = __VERIFIER_nondet_int() [L7595] case 0: [L7601] case 1: [L7607] case 2: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, tmp___3=2, tmp___6=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7608] COND TRUE ldv_state_variable_7 != 0 [L7609] tmp___4 = __VERIFIER_nondet_int() [L7611] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, tmp___3=2, tmp___4=0, tmp___6=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7612] COND TRUE ldv_state_variable_7 == 1 [L7613] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6424] struct vub300_mmc_host *vub300 ; [L6425] struct usb_host_interface *iface_desc ; [L6426] struct usb_device *udev ; [L6427] struct usb_device *tmp ; [L6428] struct usb_device *tmp___0 ; [L6429] int i ; [L6430] int retval ; [L6431] struct urb *command_out_urb ; [L6432] struct urb *command_res_urb ; [L6433] struct mmc_host *mmc ; [L6434] char manufacturer[48U] ; [L6435] char product[32U] ; [L6436] char serial_number[32U] ; [L6437] void *tmp___1 ; [L6438] struct lock_class_key __key ; [L6439] struct lock_class_key __key___0 ; [L6440] int tmp___2 ; [L6441] struct usb_endpoint_descriptor *endpoint ; [L6442] int tmp___4 ; [L6443] char *tmp___5 ; [L6444] int tmp___6 ; [L6445] int tmp___7 ; [L6446] int tmp___8 ; [L6447] unsigned int tmp___9 ; [L6448] unsigned int tmp___10 ; [L6449] unsigned int tmp___11 ; [L6450] struct lock_class_key __key___1 ; [L6451] atomic_long_t __constr_expr_0 ; [L6452] struct lock_class_key __key___2 ; [L6453] atomic_long_t __constr_expr_1 ; [L6454] struct lock_class_key __key___3 ; [L6455] atomic_long_t __constr_expr_2 ; [L6456] int tmp___12 ; [L6457] int tmp___13 ; [L6459] CALL, EXPR interface_to_usbdev(interface) [L7818] struct usb_device *tmp ; [L7820] CALL, EXPR ldv_interface_to_usbdev() [L8272] void *result ; [L8273] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8275] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L4232] void *p ; [L4233] void *tmp ; [L4234] int tmp___0 ; [L4236] tmp___0 = __VERIFIER_nondet_int() [L4237] COND FALSE !(tmp___0 != 0) [L4240] tmp = malloc(size) [L4241] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4602643634797791779:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={4602643634797791779:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L4242] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L4228] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L4242] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4602643634797791779:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={4602643634797791779:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L4243] return (p); VAL [={0:0}, ={0:0}, \old(size)=1678, \result={4602643634797791779:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4602643634797791779:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={4602643634797791779:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8275] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={4602643634797791779:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8275] tmp = ldv_malloc(sizeof(struct usb_device)) [L8276] result = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, result={4602643634797791779:0}, SERIAL_STATE=0, tmp={4602643634797791779:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8277] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, result={4602643634797791779:0}, SERIAL_STATE=0, tmp={4602643634797791779:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8281] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={4602643634797791779:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, result={4602643634797791779:0}, SERIAL_STATE=0, tmp={4602643634797791779:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7820] RET, EXPR ldv_interface_to_usbdev() [L7820] tmp = ldv_interface_to_usbdev() [L7821] return (tmp); VAL [={0:0}, ={0:0}, \result={4602643634797791779:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, intf={4026182882494381586:0}, intf={4026182882494381586:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={4602643634797791779:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6459] RET, EXPR interface_to_usbdev(interface) [L6459] tmp = interface_to_usbdev(interface) [L6460] CALL, EXPR ldv_usb_get_dev_43(tmp) [L8007] struct usb_device *tmp ; [L8009] CALL, EXPR ldv_get_dev(ldv_func_arg1) [L8286] int tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4602643634797791779:0}, data={4602643634797791779:0}, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8288] COND TRUE (unsigned long )usb_dev == (unsigned long )((struct usb_device *)0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4602643634797791779:0}, data={4602643634797791779:0}, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8289] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L4285] int tmp ; [L4287] tmp = __VERIFIER_nondet_int() [L4288] return (tmp); VAL [={0:0}, ={0:0}, \result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8289] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4602643634797791779:0}, data={4602643634797791779:0}, deadworkqueue={0:-9223372036854775808}, dev_counter=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_undef_int()=-2147483648, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8289] tmp = ldv_undef_int() [L8290] COND TRUE tmp != 0 [L8291] dev_counter = dev_counter + 1 [L8292] usb_dev = data VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4602643634797791779:0}, data={4602643634797791779:0}, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8300] return (usb_dev); VAL [={0:0}, ={0:0}, \result={4602643634797791779:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, data={4602643634797791779:0}, data={4602643634797791779:0}, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp=2147483648, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8009] RET, EXPR ldv_get_dev(ldv_func_arg1) [L8009] tmp = ldv_get_dev(ldv_func_arg1) [L8010] return (tmp); VAL [={0:0}, ={0:0}, \result={4602643634797791779:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={4602643634797791779:0}, ldv_func_arg1={4602643634797791779:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={4602643634797791779:0}, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6460] RET, EXPR ldv_usb_get_dev_43(tmp) [L6460] tmp___0 = ldv_usb_get_dev_43(tmp) [L6461] udev = tmp___0 [L6462] retval = -12 [L6463] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={9151279258441996022:0}, __constr_expr_1={-4620728402056843770:0}, __constr_expr_2={-6926571411276968410:0}, __key={4602678819171978790:0}, __key___0={4602678819170547446:0}, __key___1={-4683778796840167690:0}, __key___2={4602678819172644598:0}, __key___3={4602678819169889862:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={135107988821114615:0}, id={135107988821114615:0}, INTERF_STATE=0, interface={4026182882494381586:0}, interface={4026182882494381586:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={8821390585738936515:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={4602678819171978786:0}, ref_cnt=0, retval=4294967284, serial_number={4602678819169889926:0}, SERIAL_STATE=0, tmp={4602643634797791779:0}, tmp___0={4602643634797791779:0}, udev={4602643634797791779:0}, udev->descriptor.iManufacturer=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6463-L6464] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={4602643634797791779:0}, arg2={8821390585738936515:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8567] return __VERIFIER_nondet_int(); [L6463-L6464] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={9151279258441996022:0}, __constr_expr_1={-4620728402056843770:0}, __constr_expr_2={-6926571411276968410:0}, __key={4602678819171978790:0}, __key___0={4602678819170547446:0}, __key___1={-4683778796840167690:0}, __key___2={4602678819172644598:0}, __key___3={4602678819169889862:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={135107988821114615:0}, id={135107988821114615:0}, INTERF_STATE=0, interface={4026182882494381586:0}, interface={4026182882494381586:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={8821390585738936515:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={4602678819171978786:0}, ref_cnt=0, retval=4294967284, serial_number={4602678819169889926:0}, SERIAL_STATE=0, tmp={4602643634797791779:0}, tmp___0={4602643634797791779:0}, udev={4602643634797791779:0}, udev->descriptor.iManufacturer=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=94, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6465] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={9151279258441996022:0}, __constr_expr_1={-4620728402056843770:0}, __constr_expr_2={-6926571411276968410:0}, __key={4602678819171978790:0}, __key___0={4602678819170547446:0}, __key___1={-4683778796840167690:0}, __key___2={4602678819172644598:0}, __key___3={4602678819169889862:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={135107988821114615:0}, id={135107988821114615:0}, INTERF_STATE=0, interface={4026182882494381586:0}, interface={4026182882494381586:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={8821390585738936515:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={4602678819171978786:0}, ref_cnt=0, retval=4294967284, serial_number={4602678819169889926:0}, SERIAL_STATE=0, tmp={4602643634797791779:0}, tmp___0={4602643634797791779:0}, udev={4602643634797791779:0}, udev->descriptor.iProduct=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6465] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={4602643634797791779:0}, arg2={4602678819171978786:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8567] return __VERIFIER_nondet_int(); [L6465] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={9151279258441996022:0}, __constr_expr_1={-4620728402056843770:0}, __constr_expr_2={-6926571411276968410:0}, __key={4602678819171978790:0}, __key___0={4602678819170547446:0}, __key___1={-4683778796840167690:0}, __key___2={4602678819172644598:0}, __key___3={4602678819169889862:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={135107988821114615:0}, id={135107988821114615:0}, INTERF_STATE=0, interface={4026182882494381586:0}, interface={4026182882494381586:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={8821390585738936515:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={4602678819171978786:0}, ref_cnt=0, retval=4294967284, serial_number={4602678819169889926:0}, SERIAL_STATE=0, tmp={4602643634797791779:0}, tmp___0={4602643634797791779:0}, udev={4602643634797791779:0}, udev->descriptor.iProduct=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=95, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6466] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={9151279258441996022:0}, __constr_expr_1={-4620728402056843770:0}, __constr_expr_2={-6926571411276968410:0}, __key={4602678819171978790:0}, __key___0={4602678819170547446:0}, __key___1={-4683778796840167690:0}, __key___2={4602678819172644598:0}, __key___3={4602678819169889862:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={135107988821114615:0}, id={135107988821114615:0}, INTERF_STATE=0, interface={4026182882494381586:0}, interface={4026182882494381586:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={8821390585738936515:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={4602678819171978786:0}, ref_cnt=0, retval=4294967284, serial_number={4602678819169889926:0}, SERIAL_STATE=0, tmp={4602643634797791779:0}, tmp___0={4602643634797791779:0}, udev={4602643634797791779:0}, udev->descriptor.iSerialNumber=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6466-L6467] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={4602643634797791779:0}, arg2={4602678819169889926:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8567] return __VERIFIER_nondet_int(); [L6466-L6467] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={9151279258441996022:0}, __constr_expr_1={-4620728402056843770:0}, __constr_expr_2={-6926571411276968410:0}, __key={4602678819171978790:0}, __key___0={4602678819170547446:0}, __key___1={-4683778796840167690:0}, __key___2={4602678819172644598:0}, __key___3={4602678819169889862:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={135107988821114615:0}, id={135107988821114615:0}, INTERF_STATE=0, interface={4026182882494381586:0}, interface={4026182882494381586:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={8821390585738936515:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, product={4602678819171978786:0}, ref_cnt=0, retval=4294967284, serial_number={4602678819169889926:0}, SERIAL_STATE=0, tmp={4602643634797791779:0}, tmp___0={4602643634797791779:0}, udev={4602643634797791779:0}, udev->descriptor.iSerialNumber=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=96, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6469] udev->descriptor.idVendor [L6469] udev->descriptor.idProduct [L6471] CALL, EXPR ldv_usb_alloc_urb_44(0, 208U) [L8015] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, mem_flags=208, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8017] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8191] struct urb *value ; [L8192] void *tmp ; [L8193] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8195] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L4232] void *p ; [L4233] void *tmp ; [L4234] int tmp___0 ; [L4236] tmp___0 = __VERIFIER_nondet_int() [L4237] COND TRUE tmp___0 != 0 [L4238] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \old(usb_urb)=null, \old(usb_urb)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=2147483648, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8195] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8195] tmp = ldv_malloc(sizeof(struct urb)) [L8196] value = (struct urb *)tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8197] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L4285] int tmp ; [L4287] tmp = __VERIFIER_nondet_int() [L4288] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8197] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_undef_int()=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8197] tmp___0 = ldv_undef_int() [L8198] COND FALSE !(tmp___0 != 0) VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8205] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=null, \old(usb_urb)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8017] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, iso_packets=0, ldv_alloc_urb()={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, mem_flags=208, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8017] tmp = ldv_alloc_urb() [L8018] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, iso_packets=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, mem_flags=208, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6471] RET, EXPR ldv_usb_alloc_urb_44(0, 208U) [L6471] command_out_urb = ldv_usb_alloc_urb_44(0, 208U) [L6472] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6473] retval = -12 [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); [L6740] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, command_out_urb={0:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={135107988821114615:0}, id={135107988821114615:0}, INTERF_STATE=0, interface={4026182882494381586:0}, interface={4026182882494381586:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, retval=4294967284, SERIAL_STATE=0, tmp={4602643634797791779:0}, tmp___0={4602643634797791779:0}, udev={4602643634797791779:0}, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7613] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7613] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7614] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, tmp___3=2, tmp___4=0, tmp___6=1, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7593] tmp___3 = __VERIFIER_nondet_int() [L7595] case 0: [L7601] case 1: [L7607] case 2: [L7670] case 3: [L7676] case 4: [L7722] case 5: [L7728] case 6: [L7734] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, tmp___3=7, tmp___4=0, tmp___6=1, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7735] COND TRUE ldv_state_variable_0 != 0 [L7736] tmp___6 = __VERIFIER_nondet_int() [L7738] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, tmp___3=7, tmp___4=0, tmp___6=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7739] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7740] CALL vub300_exit() [L6898] CALL ldv_usb_deregister_60(& vub300_driver) [L8099] FCALL usb_deregister(arg) [L8100] ldv_state_variable_7 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg={86:0}, arg={86:0}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6898] RET ldv_usb_deregister_60(& vub300_driver) [L6899] CALL ldv_flush_workqueue_61(cmndworkqueue) [L8107] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={-9223372036854775808:0}, ldv_func_arg1={-9223372036854775808:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8108] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8108] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={-9223372036854775808:0}, ldv_func_arg1={-9223372036854775808:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6899] RET ldv_flush_workqueue_61(cmndworkqueue) [L6900] CALL ldv_flush_workqueue_62(pollworkqueue) [L8115] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8116] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8116] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6900] RET ldv_flush_workqueue_62(pollworkqueue) [L6901] CALL ldv_flush_workqueue_63(deadworkqueue) [L8123] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8124] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8124] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6901] RET ldv_flush_workqueue_63(deadworkqueue) [L6902] CALL ldv_destroy_workqueue_64(cmndworkqueue) [L8131] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={-9223372036854775808:0}, ldv_func_arg1={-9223372036854775808:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8132] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8132] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={-9223372036854775808:0}, ldv_func_arg1={-9223372036854775808:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6902] RET ldv_destroy_workqueue_64(cmndworkqueue) [L6903] CALL ldv_destroy_workqueue_65(pollworkqueue) [L8139] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8140] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8140] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6903] RET ldv_destroy_workqueue_65(pollworkqueue) [L6904] CALL ldv_destroy_workqueue_66(deadworkqueue) [L8147] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8148] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7420] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7424] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7428] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7432] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(dev_counter)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(usb_dev)=null, \old(usb_dev)=null, \old(usb_urb)=null, \old(usb_urb)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8148] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L6904] RET ldv_destroy_workqueue_66(deadworkqueue) [L7740] RET vub300_exit() [L7741] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-9223372036854775678:0}, ldvarg1={135107988821114615:0}, ldvarg2={4602643634797791778:0}, ldvarg3={3918131675799748183:0}, ldvarg4={4602643634797792934:0}, ldvarg5={9214364837600034801:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={135107988821114615:0}, tmp___0={4602643634797792934:0}, tmp___1={3918131675799748183:0}, tmp___2={4602643634797791778:0}, tmp___3=7, tmp___4=0, tmp___6=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L7782] CALL ldv_check_final_state() [L8378] COND FALSE !((unsigned long )usb_urb != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8382] COND TRUE (unsigned long )usb_dev != (unsigned long )((struct usb_device *)0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8383] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] [L8156] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, cmndworkqueue={-9223372036854775808:0}, completeFnBulkCounter=0, completeFnIntCounter=0, deadworkqueue={0:-9223372036854775808}, dev_counter=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={4602643634797791779:0}, usb_intfdata={0:0}, usb_urb={0:0}, vub300_driver={86:0}, vub300_driver_group1={4026182882494381586:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={144115188088438390:0}, vub300_table={84:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 93 procedures, 1579 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 99.0s, OverallIterations: 21, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.3s, AutomataDifference: 19.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 27344 SdHoareTripleChecker+Valid, 8.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 27336 mSDsluCounter, 143951 SdHoareTripleChecker+Invalid, 7.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 94497 mSDsCounter, 220 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 904 IncrementalHoareTripleChecker+Invalid, 1124 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 220 mSolverCounterUnsat, 49454 mSDtfsCounter, 904 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 4144 GetRequests, 4068 SyntacticMatches, 0 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 6.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=22103occurred in iteration=15, InterpolantAutomatonStates: 91, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 8.4s AutomataMinimizationTime, 20 MinimizatonAttempts, 2789 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.8s SsaConstructionTime, 18.6s SatisfiabilityAnalysisTime, 33.7s InterpolantComputationTime, 4117 NumberOfCodeBlocks, 3922 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 4126 ConstructedInterpolants, 0 QuantifiedInterpolants, 6913 SizeOfPredicates, 23 NumberOfNonLiveVariables, 25560 ConjunctsInSsa, 76 ConjunctsInUnsatCore, 23 InterpolantComputations, 17 PerfectInterpolantSequences, 3755/3822 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-06 22:52:39,108 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_93ec679c-bb13-43b7-bb3c-4be7cd29e36a/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample