./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 --- Real Ultimate output --- This is Ultimate 0.2.2-839c364b5d67a0f615c82cb70ab247790648d4a9-839c364 [2021-12-14 17:47:44,499 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-14 17:47:44,500 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-14 17:47:44,556 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-14 17:47:44,556 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-14 17:47:44,560 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-14 17:47:44,561 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-14 17:47:44,565 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-14 17:47:44,567 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-14 17:47:44,572 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-14 17:47:44,572 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-14 17:47:44,573 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-14 17:47:44,574 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-14 17:47:44,576 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-14 17:47:44,577 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-14 17:47:44,582 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-14 17:47:44,584 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-14 17:47:44,584 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-14 17:47:44,586 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-14 17:47:44,590 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-14 17:47:44,591 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-14 17:47:44,592 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-14 17:47:44,594 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-14 17:47:44,594 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-14 17:47:44,598 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-14 17:47:44,598 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-14 17:47:44,598 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-14 17:47:44,600 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-14 17:47:44,600 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-14 17:47:44,601 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-14 17:47:44,601 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-14 17:47:44,602 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-14 17:47:44,603 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-14 17:47:44,604 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-14 17:47:44,605 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-14 17:47:44,605 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-14 17:47:44,605 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-14 17:47:44,605 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-14 17:47:44,606 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-14 17:47:44,606 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-14 17:47:44,607 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-14 17:47:44,608 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-14 17:47:44,637 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-14 17:47:44,637 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-14 17:47:44,638 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-14 17:47:44,638 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-14 17:47:44,639 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-14 17:47:44,639 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-14 17:47:44,639 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-14 17:47:44,639 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-14 17:47:44,640 INFO L138 SettingsManager]: * Use SBE=true [2021-12-14 17:47:44,640 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-14 17:47:44,640 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-14 17:47:44,641 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-14 17:47:44,641 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-14 17:47:44,641 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-14 17:47:44,641 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-14 17:47:44,641 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-14 17:47:44,641 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-14 17:47:44,642 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-14 17:47:44,642 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-14 17:47:44,642 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-14 17:47:44,642 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-14 17:47:44,642 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-14 17:47:44,642 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-14 17:47:44,643 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-14 17:47:44,643 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-14 17:47:44,643 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-14 17:47:44,643 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-14 17:47:44,643 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-14 17:47:44,643 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-14 17:47:44,643 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-14 17:47:44,644 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-14 17:47:44,644 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 [2021-12-14 17:47:44,851 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-14 17:47:44,870 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-14 17:47:44,872 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-14 17:47:44,873 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-14 17:47:44,873 INFO L275 PluginConnector]: CDTParser initialized [2021-12-14 17:47:44,875 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-14 17:47:44,921 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/79661bcc3/5dd79749968142dca53ef08eef695a0d/FLAGeb58d89fc [2021-12-14 17:47:45,597 INFO L306 CDTParser]: Found 1 translation units. [2021-12-14 17:47:45,598 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-14 17:47:45,632 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/79661bcc3/5dd79749968142dca53ef08eef695a0d/FLAGeb58d89fc [2021-12-14 17:47:45,742 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/79661bcc3/5dd79749968142dca53ef08eef695a0d [2021-12-14 17:47:45,744 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-14 17:47:45,746 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-14 17:47:45,747 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-14 17:47:45,747 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-14 17:47:45,749 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-14 17:47:45,750 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:47:45" (1/1) ... [2021-12-14 17:47:45,750 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1fa7ff58 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:45, skipping insertion in model container [2021-12-14 17:47:45,751 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:47:45" (1/1) ... [2021-12-14 17:47:45,755 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-14 17:47:45,817 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-14 17:47:46,125 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-14 17:47:46,126 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-14 17:47:46,258 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-14 17:47:46,599 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:47:46,613 INFO L203 MainTranslator]: Completed pre-run [2021-12-14 17:47:46,688 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-14 17:47:46,688 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-14 17:47:46,694 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-14 17:47:46,855 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:47:46,895 INFO L208 MainTranslator]: Completed translation [2021-12-14 17:47:46,895 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46 WrapperNode [2021-12-14 17:47:46,895 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-14 17:47:46,896 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-14 17:47:46,896 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-14 17:47:46,897 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-14 17:47:46,902 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:46,956 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:47,019 INFO L137 Inliner]: procedures = 170, calls = 1019, calls flagged for inlining = 80, calls inlined = 51, statements flattened = 1557 [2021-12-14 17:47:47,020 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-14 17:47:47,021 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-14 17:47:47,021 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-14 17:47:47,021 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-14 17:47:47,027 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:47,029 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:47,036 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:47,038 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:47,079 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:47,093 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:47,102 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:47,110 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-14 17:47:47,111 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-14 17:47:47,111 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-14 17:47:47,111 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-14 17:47:47,117 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (1/1) ... [2021-12-14 17:47:47,122 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-14 17:47:47,128 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-14 17:47:47,140 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-14 17:47:47,158 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-14 17:47:47,167 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_map_urb_for_dma [2021-12-14 17:47:47,167 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_map_urb_for_dma [2021-12-14 17:47:47,167 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2021-12-14 17:47:47,167 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2021-12-14 17:47:47,168 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2021-12-14 17:47:47,168 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2021-12-14 17:47:47,169 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-14 17:47:47,169 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-14 17:47:47,169 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-14 17:47:47,169 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2021-12-14 17:47:47,170 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2021-12-14 17:47:47,170 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-14 17:47:47,170 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-14 17:47:47,170 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2021-12-14 17:47:47,170 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2021-12-14 17:47:47,170 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_control [2021-12-14 17:47:47,170 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_control [2021-12-14 17:47:47,170 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_dequeue [2021-12-14 17:47:47,170 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_dequeue [2021-12-14 17:47:47,171 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-14 17:47:47,171 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-14 17:47:47,171 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2021-12-14 17:47:47,171 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2021-12-14 17:47:47,171 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_endpoint_disable [2021-12-14 17:47:47,171 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_endpoint_disable [2021-12-14 17:47:47,171 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-14 17:47:47,171 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-14 17:47:47,172 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-14 17:47:47,172 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-14 17:47:47,172 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-14 17:47:47,172 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-12-14 17:47:47,172 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-14 17:47:47,172 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-14 17:47:47,172 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_reset [2021-12-14 17:47:47,173 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_reset [2021-12-14 17:47:47,173 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_enqueue [2021-12-14 17:47:47,173 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_enqueue [2021-12-14 17:47:47,173 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-14 17:47:47,173 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-14 17:47:47,173 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-14 17:47:47,173 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_resume [2021-12-14 17:47:47,174 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_resume [2021-12-14 17:47:47,174 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-14 17:47:47,174 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_gpout_set_value [2021-12-14 17:47:47,174 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_gpout_set_value [2021-12-14 17:47:47,193 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-14 17:47:47,193 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-14 17:47:47,193 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-14 17:47:47,193 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-14 17:47:47,193 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2021-12-14 17:47:47,194 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2021-12-14 17:47:47,194 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2021-12-14 17:47:47,194 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2021-12-14 17:47:47,195 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-14 17:47:47,195 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-14 17:47:47,196 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-14 17:47:47,196 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-14 17:47:47,196 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-14 17:47:47,196 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_unmap_urb_for_dma [2021-12-14 17:47:47,196 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_unmap_urb_for_dma [2021-12-14 17:47:47,197 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-14 17:47:47,197 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-14 17:47:47,197 INFO L130 BoogieDeclarations]: Found specification of procedure to_spi_device [2021-12-14 17:47:47,197 INFO L138 BoogieDeclarations]: Found implementation of procedure to_spi_device [2021-12-14 17:47:47,197 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-14 17:47:47,197 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2021-12-14 17:47:47,197 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2021-12-14 17:47:47,198 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_suspend [2021-12-14 17:47:47,198 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_suspend [2021-12-14 17:47:47,198 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_get_frame_number [2021-12-14 17:47:47,198 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_get_frame_number [2021-12-14 17:47:47,198 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-14 17:47:47,198 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-14 17:47:47,199 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-14 17:47:47,199 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-14 17:47:47,199 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_status_data [2021-12-14 17:47:47,199 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_status_data [2021-12-14 17:47:47,199 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_max3421 [2021-12-14 17:47:47,199 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_max3421 [2021-12-14 17:47:47,199 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2021-12-14 17:47:47,199 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2021-12-14 17:47:47,515 INFO L236 CfgBuilder]: Building ICFG [2021-12-14 17:47:47,516 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-14 17:47:47,850 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-14 17:47:48,357 INFO L277 CfgBuilder]: Performing block encoding [2021-12-14 17:47:48,365 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-14 17:47:48,365 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-14 17:47:48,367 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:47:48 BoogieIcfgContainer [2021-12-14 17:47:48,367 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-14 17:47:48,368 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-14 17:47:48,368 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-14 17:47:48,370 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-14 17:47:48,371 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 05:47:45" (1/3) ... [2021-12-14 17:47:48,371 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5705919d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:47:48, skipping insertion in model container [2021-12-14 17:47:48,371 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:46" (2/3) ... [2021-12-14 17:47:48,372 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5705919d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:47:48, skipping insertion in model container [2021-12-14 17:47:48,372 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:47:48" (3/3) ... [2021-12-14 17:47:48,373 INFO L111 eAbstractionObserver]: Analyzing ICFG 43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-14 17:47:48,376 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-14 17:47:48,376 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-14 17:47:48,406 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-14 17:47:48,410 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-14 17:47:48,411 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-14 17:47:48,444 INFO L276 IsEmpty]: Start isEmpty. Operand has 535 states, 395 states have (on average 1.379746835443038) internal successors, (545), 405 states have internal predecessors, (545), 105 states have call successors, (105), 34 states have call predecessors, (105), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2021-12-14 17:47:48,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-14 17:47:48,454 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:47:48,454 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:47:48,455 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:47:48,458 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:47:48,458 INFO L85 PathProgramCache]: Analyzing trace with hash -1403727082, now seen corresponding path program 1 times [2021-12-14 17:47:48,480 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-14 17:47:48,480 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1391210377] [2021-12-14 17:47:48,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:47:48,481 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-14 17:47:48,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:48,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-14 17:47:48,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:48,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-14 17:47:48,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:48,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-14 17:47:48,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:48,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-14 17:47:48,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:48,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-14 17:47:48,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:48,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-14 17:47:48,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:48,865 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-14 17:47:48,865 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-14 17:47:48,866 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1391210377] [2021-12-14 17:47:48,866 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1391210377] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:47:48,866 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:47:48,866 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-14 17:47:48,868 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [994074895] [2021-12-14 17:47:48,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:47:48,871 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-14 17:47:48,871 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-14 17:47:48,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-14 17:47:48,890 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-14 17:47:48,892 INFO L87 Difference]: Start difference. First operand has 535 states, 395 states have (on average 1.379746835443038) internal successors, (545), 405 states have internal predecessors, (545), 105 states have call successors, (105), 34 states have call predecessors, (105), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:47:50,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:47:50,433 INFO L93 Difference]: Finished difference Result 1566 states and 2222 transitions. [2021-12-14 17:47:50,434 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-14 17:47:50,435 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 58 [2021-12-14 17:47:50,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:47:50,453 INFO L225 Difference]: With dead ends: 1566 [2021-12-14 17:47:50,453 INFO L226 Difference]: Without dead ends: 1003 [2021-12-14 17:47:50,458 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-14 17:47:50,460 INFO L933 BasicCegarLoop]: 711 mSDtfsCounter, 1174 mSDsluCounter, 1543 mSDsCounter, 0 mSdLazyCounter, 908 mSolverCounterSat, 613 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1244 SdHoareTripleChecker+Valid, 2254 SdHoareTripleChecker+Invalid, 1521 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 613 IncrementalHoareTripleChecker+Valid, 908 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-12-14 17:47:50,460 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1244 Valid, 2254 Invalid, 1521 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [613 Valid, 908 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-12-14 17:47:50,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1003 states. [2021-12-14 17:47:50,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1003 to 907. [2021-12-14 17:47:50,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 907 states, 675 states have (on average 1.3644444444444443) internal successors, (921), 678 states have internal predecessors, (921), 171 states have call successors, (171), 61 states have call predecessors, (171), 60 states have return successors, (170), 170 states have call predecessors, (170), 170 states have call successors, (170) [2021-12-14 17:47:50,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 907 states to 907 states and 1262 transitions. [2021-12-14 17:47:50,568 INFO L78 Accepts]: Start accepts. Automaton has 907 states and 1262 transitions. Word has length 58 [2021-12-14 17:47:50,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:47:50,569 INFO L470 AbstractCegarLoop]: Abstraction has 907 states and 1262 transitions. [2021-12-14 17:47:50,569 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:47:50,569 INFO L276 IsEmpty]: Start isEmpty. Operand 907 states and 1262 transitions. [2021-12-14 17:47:50,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-14 17:47:50,577 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:47:50,577 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:47:50,577 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-14 17:47:50,578 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:47:50,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:47:50,578 INFO L85 PathProgramCache]: Analyzing trace with hash -1087134040, now seen corresponding path program 1 times [2021-12-14 17:47:50,579 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-14 17:47:50,579 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [155748998] [2021-12-14 17:47:50,579 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:47:50,579 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-14 17:47:50,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:50,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-14 17:47:50,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:50,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-14 17:47:50,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:50,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-14 17:47:50,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:50,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-14 17:47:50,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:50,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-14 17:47:50,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:50,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-14 17:47:50,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:50,733 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-14 17:47:50,733 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-14 17:47:50,733 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [155748998] [2021-12-14 17:47:50,734 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [155748998] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:47:50,734 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:47:50,734 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-14 17:47:50,734 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1582864827] [2021-12-14 17:47:50,734 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:47:50,735 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-14 17:47:50,735 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-14 17:47:50,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-14 17:47:50,736 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-14 17:47:50,736 INFO L87 Difference]: Start difference. First operand 907 states and 1262 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:47:51,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:47:51,554 INFO L93 Difference]: Finished difference Result 2159 states and 2998 transitions. [2021-12-14 17:47:51,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-14 17:47:51,554 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 69 [2021-12-14 17:47:51,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:47:51,560 INFO L225 Difference]: With dead ends: 2159 [2021-12-14 17:47:51,560 INFO L226 Difference]: Without dead ends: 1279 [2021-12-14 17:47:51,563 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-14 17:47:51,563 INFO L933 BasicCegarLoop]: 822 mSDtfsCounter, 630 mSDsluCounter, 1360 mSDsCounter, 0 mSdLazyCounter, 649 mSolverCounterSat, 330 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 679 SdHoareTripleChecker+Valid, 2182 SdHoareTripleChecker+Invalid, 979 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 330 IncrementalHoareTripleChecker+Valid, 649 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-14 17:47:51,564 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [679 Valid, 2182 Invalid, 979 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [330 Valid, 649 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-14 17:47:51,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1279 states. [2021-12-14 17:47:51,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1279 to 1196. [2021-12-14 17:47:51,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1196 states, 903 states have (on average 1.3565891472868217) internal successors, (1225), 908 states have internal predecessors, (1225), 210 states have call successors, (210), 83 states have call predecessors, (210), 82 states have return successors, (209), 208 states have call predecessors, (209), 209 states have call successors, (209) [2021-12-14 17:47:51,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1196 states to 1196 states and 1644 transitions. [2021-12-14 17:47:51,602 INFO L78 Accepts]: Start accepts. Automaton has 1196 states and 1644 transitions. Word has length 69 [2021-12-14 17:47:51,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:47:51,603 INFO L470 AbstractCegarLoop]: Abstraction has 1196 states and 1644 transitions. [2021-12-14 17:47:51,603 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:47:51,603 INFO L276 IsEmpty]: Start isEmpty. Operand 1196 states and 1644 transitions. [2021-12-14 17:47:51,606 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-12-14 17:47:51,606 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:47:51,606 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:47:51,606 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-14 17:47:51,606 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:47:51,607 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:47:51,607 INFO L85 PathProgramCache]: Analyzing trace with hash 1198872686, now seen corresponding path program 1 times [2021-12-14 17:47:51,607 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-14 17:47:51,607 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [159849490] [2021-12-14 17:47:51,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:47:51,607 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-14 17:47:51,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-14 17:47:51,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-14 17:47:51,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-14 17:47:51,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-14 17:47:51,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-14 17:47:51,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-14 17:47:51,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-14 17:47:51,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-14 17:47:51,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-14 17:47:51,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:51,771 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2021-12-14 17:47:51,771 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-14 17:47:51,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [159849490] [2021-12-14 17:47:51,771 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [159849490] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:47:51,771 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:47:51,772 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-14 17:47:51,772 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1372761037] [2021-12-14 17:47:51,772 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:47:51,772 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-14 17:47:51,772 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-14 17:47:51,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-14 17:47:51,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-14 17:47:51,773 INFO L87 Difference]: Start difference. First operand 1196 states and 1644 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-14 17:47:52,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:47:52,619 INFO L93 Difference]: Finished difference Result 1337 states and 1828 transitions. [2021-12-14 17:47:52,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-14 17:47:52,619 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 89 [2021-12-14 17:47:52,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:47:52,625 INFO L225 Difference]: With dead ends: 1337 [2021-12-14 17:47:52,625 INFO L226 Difference]: Without dead ends: 1334 [2021-12-14 17:47:52,626 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-14 17:47:52,626 INFO L933 BasicCegarLoop]: 649 mSDtfsCounter, 925 mSDsluCounter, 750 mSDsCounter, 0 mSdLazyCounter, 460 mSolverCounterSat, 468 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 969 SdHoareTripleChecker+Valid, 1399 SdHoareTripleChecker+Invalid, 928 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 468 IncrementalHoareTripleChecker+Valid, 460 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-14 17:47:52,627 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [969 Valid, 1399 Invalid, 928 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [468 Valid, 460 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-14 17:47:52,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1334 states. [2021-12-14 17:47:52,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1334 to 1224. [2021-12-14 17:47:52,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1224 states, 922 states have (on average 1.3481561822125814) internal successors, (1243), 927 states have internal predecessors, (1243), 210 states have call successors, (210), 92 states have call predecessors, (210), 91 states have return successors, (209), 208 states have call predecessors, (209), 209 states have call successors, (209) [2021-12-14 17:47:52,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1224 states to 1224 states and 1662 transitions. [2021-12-14 17:47:52,663 INFO L78 Accepts]: Start accepts. Automaton has 1224 states and 1662 transitions. Word has length 89 [2021-12-14 17:47:52,663 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:47:52,663 INFO L470 AbstractCegarLoop]: Abstraction has 1224 states and 1662 transitions. [2021-12-14 17:47:52,663 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-14 17:47:52,663 INFO L276 IsEmpty]: Start isEmpty. Operand 1224 states and 1662 transitions. [2021-12-14 17:47:52,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-14 17:47:52,666 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:47:52,666 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:47:52,666 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-14 17:47:52,667 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:47:52,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:47:52,667 INFO L85 PathProgramCache]: Analyzing trace with hash -552282000, now seen corresponding path program 1 times [2021-12-14 17:47:52,667 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-14 17:47:52,668 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1086653324] [2021-12-14 17:47:52,668 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:47:52,668 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-14 17:47:52,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-14 17:47:52,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-14 17:47:52,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-14 17:47:52,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-14 17:47:52,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-14 17:47:52,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-14 17:47:52,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-14 17:47:52,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-14 17:47:52,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-14 17:47:52,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:47:52,766 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2021-12-14 17:47:52,767 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-14 17:47:52,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1086653324] [2021-12-14 17:47:52,767 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1086653324] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:47:52,767 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:47:52,767 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-14 17:47:52,767 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [148241095] [2021-12-14 17:47:52,767 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:47:52,768 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-14 17:47:52,768 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-14 17:47:52,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-14 17:47:52,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-14 17:47:52,769 INFO L87 Difference]: Start difference. First operand 1224 states and 1662 transitions. Second operand has 5 states, 5 states have (on average 12.2) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-14 17:47:53,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:47:53,474 INFO L93 Difference]: Finished difference Result 2500 states and 3418 transitions. [2021-12-14 17:47:53,474 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-14 17:47:53,475 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.2) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 99 [2021-12-14 17:47:53,475 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:47:53,482 INFO L225 Difference]: With dead ends: 2500 [2021-12-14 17:47:53,482 INFO L226 Difference]: Without dead ends: 1306 [2021-12-14 17:47:53,486 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-14 17:47:53,487 INFO L933 BasicCegarLoop]: 669 mSDtfsCounter, 286 mSDsluCounter, 1251 mSDsCounter, 0 mSdLazyCounter, 468 mSolverCounterSat, 251 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 1920 SdHoareTripleChecker+Invalid, 719 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 251 IncrementalHoareTripleChecker+Valid, 468 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-14 17:47:53,487 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [303 Valid, 1920 Invalid, 719 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [251 Valid, 468 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-14 17:47:53,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1306 states. [2021-12-14 17:47:53,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1306 to 1226. [2021-12-14 17:47:53,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1226 states, 924 states have (on average 1.3452380952380953) internal successors, (1243), 929 states have internal predecessors, (1243), 210 states have call successors, (210), 92 states have call predecessors, (210), 91 states have return successors, (209), 208 states have call predecessors, (209), 209 states have call successors, (209) [2021-12-14 17:47:53,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1226 states to 1226 states and 1662 transitions. [2021-12-14 17:47:53,536 INFO L78 Accepts]: Start accepts. Automaton has 1226 states and 1662 transitions. Word has length 99 [2021-12-14 17:47:53,537 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:47:53,537 INFO L470 AbstractCegarLoop]: Abstraction has 1226 states and 1662 transitions. [2021-12-14 17:47:53,537 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.2) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-14 17:47:53,537 INFO L276 IsEmpty]: Start isEmpty. Operand 1226 states and 1662 transitions. [2021-12-14 17:47:53,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-14 17:47:53,541 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:47:53,541 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:47:53,541 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-14 17:47:53,541 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:47:53,542 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:47:53,542 INFO L85 PathProgramCache]: Analyzing trace with hash -1573350354, now seen corresponding path program 1 times [2021-12-14 17:47:53,542 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-14 17:47:53,542 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [832808206] [2021-12-14 17:47:53,542 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:47:53,542 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-14 17:47:53,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-14 17:47:53,613 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-14 17:47:53,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-14 17:47:53,703 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-14 17:47:53,703 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-14 17:47:53,704 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-14 17:47:53,705 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-14 17:47:53,707 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1] [2021-12-14 17:47:53,709 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-14 17:47:53,793 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 05:47:53 BoogieIcfgContainer [2021-12-14 17:47:53,794 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-14 17:47:53,794 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-14 17:47:53,794 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-14 17:47:53,794 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-14 17:47:53,795 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:47:48" (3/4) ... [2021-12-14 17:47:53,797 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-14 17:47:53,797 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-14 17:47:53,797 INFO L158 Benchmark]: Toolchain (without parser) took 8051.51ms. Allocated memory was 96.5MB in the beginning and 276.8MB in the end (delta: 180.4MB). Free memory was 57.5MB in the beginning and 73.4MB in the end (delta: -15.9MB). Peak memory consumption was 164.0MB. Max. memory is 16.1GB. [2021-12-14 17:47:53,797 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 96.5MB. Free memory was 54.2MB in the beginning and 54.2MB in the end (delta: 34.4kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-14 17:47:53,798 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1148.66ms. Allocated memory was 96.5MB in the beginning and 123.7MB in the end (delta: 27.3MB). Free memory was 57.5MB in the beginning and 69.4MB in the end (delta: -11.9MB). Peak memory consumption was 58.3MB. Max. memory is 16.1GB. [2021-12-14 17:47:53,798 INFO L158 Benchmark]: Boogie Procedure Inliner took 123.86ms. Allocated memory is still 123.7MB. Free memory was 69.4MB in the beginning and 59.6MB in the end (delta: 9.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-14 17:47:53,798 INFO L158 Benchmark]: Boogie Preprocessor took 90.01ms. Allocated memory is still 123.7MB. Free memory was 59.6MB in the beginning and 50.0MB in the end (delta: 9.6MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-14 17:47:53,798 INFO L158 Benchmark]: RCFGBuilder took 1256.10ms. Allocated memory was 123.7MB in the beginning and 201.3MB in the end (delta: 77.6MB). Free memory was 50.0MB in the beginning and 139.6MB in the end (delta: -89.6MB). Peak memory consumption was 39.5MB. Max. memory is 16.1GB. [2021-12-14 17:47:53,799 INFO L158 Benchmark]: TraceAbstraction took 5425.57ms. Allocated memory was 201.3MB in the beginning and 276.8MB in the end (delta: 75.5MB). Free memory was 139.6MB in the beginning and 73.4MB in the end (delta: 66.2MB). Peak memory consumption was 139.6MB. Max. memory is 16.1GB. [2021-12-14 17:47:53,799 INFO L158 Benchmark]: Witness Printer took 2.71ms. Allocated memory is still 276.8MB. Free memory is still 73.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-14 17:47:53,804 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 96.5MB. Free memory was 54.2MB in the beginning and 54.2MB in the end (delta: 34.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1148.66ms. Allocated memory was 96.5MB in the beginning and 123.7MB in the end (delta: 27.3MB). Free memory was 57.5MB in the beginning and 69.4MB in the end (delta: -11.9MB). Peak memory consumption was 58.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 123.86ms. Allocated memory is still 123.7MB. Free memory was 69.4MB in the beginning and 59.6MB in the end (delta: 9.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Preprocessor took 90.01ms. Allocated memory is still 123.7MB. Free memory was 59.6MB in the beginning and 50.0MB in the end (delta: 9.6MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 1256.10ms. Allocated memory was 123.7MB in the beginning and 201.3MB in the end (delta: 77.6MB). Free memory was 50.0MB in the beginning and 139.6MB in the end (delta: -89.6MB). Peak memory consumption was 39.5MB. Max. memory is 16.1GB. * TraceAbstraction took 5425.57ms. Allocated memory was 201.3MB in the beginning and 276.8MB in the end (delta: 75.5MB). Free memory was 139.6MB in the beginning and 73.4MB in the end (delta: 66.2MB). Peak memory consumption was 139.6MB. Max. memory is 16.1GB. * Witness Printer took 2.71ms. Allocated memory is still 276.8MB. Free memory is still 73.4MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 3987]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 5883, overapproximation of bitwiseAnd at line 6549. Possible FailurePath: [L4010] int ldv_irq_1_2 = 0; [L4011] int LDV_IN_INTERRUPT = 1; [L4012] int ldv_irq_1_3 = 0; [L4013] void *ldv_irq_data_1_1 ; [L4014] int ldv_irq_1_1 = 0; [L4015] int ldv_irq_1_0 = 0; [L4016] struct urb *max3421_hcd_desc_group0 ; [L4017] int ldv_irq_line_1_3 ; [L4018] void *ldv_irq_data_1_0 ; [L4019] int ldv_state_variable_0 ; [L4020] struct usb_hcd *max3421_hcd_desc_group1 ; [L4021] int ldv_state_variable_3 ; [L4022] int ldv_irq_line_1_0 ; [L4023] int ldv_state_variable_2 ; [L4024] void *ldv_irq_data_1_3 ; [L4025] struct spi_device *max3421_driver_group0 ; [L4026] int ref_cnt ; [L4027] int ldv_irq_line_1_1 ; [L4028] void *ldv_irq_data_1_2 ; [L4029] int ldv_state_variable_1 ; [L4030] int ldv_irq_line_1_2 ; [L4208] static struct max3421_hcd *max3421_hcd_list ; [L4209-L4213] static int const hrsl_to_error[16U] = { 0, -22, -22, -22, -11, -32, -84, -71, -121, -71, -71, -84, -5, -5, -62, -75}; [L5882-L5888] static struct hc_driver max3421_hcd_desc = {"max3421", "MAX3421 USB Host-Controller Driver", 192UL, 0, 16, & max3421_reset, & max3421_start, 0, 0, & max3421_stop, 0, & max3421_get_frame_number, & max3421_urb_enqueue, & max3421_urb_dequeue, & max3421_map_urb_for_dma, & max3421_unmap_urb_for_dma, & max3421_endpoint_disable, 0, & max3421_hub_status_data, & max3421_hub_control, & max3421_bus_suspend, & max3421_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L6027-L6029] static struct spi_driver max3421_driver = {0, & max3421_probe, & max3421_remove, 0, 0, 0, {"max3421-hcd", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}; [L6045] int ldv_retval_0 ; [L6046] int ldv_retval_1 ; [L6049] int ldv_retval_2 ; [L6545] int ldv_spin = 0; VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6194] char *ldvarg7 ; [L6195] void *tmp ; [L6196] u16 ldvarg3 ; [L6197] u16 tmp___0 ; [L6198] u16 ldvarg0 ; [L6199] u16 tmp___1 ; [L6200] gfp_t ldvarg5 ; [L6201] gfp_t ldvarg6 ; [L6202] struct usb_host_endpoint *ldvarg8 ; [L6203] void *tmp___2 ; [L6204] u16 ldvarg1 ; [L6205] u16 tmp___3 ; [L6206] char *ldvarg4 ; [L6207] void *tmp___4 ; [L6208] int ldvarg9 ; [L6209] int tmp___5 ; [L6210] u16 ldvarg2 ; [L6211] u16 tmp___6 ; [L6212] int tmp___7 ; [L6213] int tmp___8 ; [L6214] int tmp___9 ; [L6215] int tmp___10 ; VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=1] [L6217] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] tmp = ldv_zalloc(1UL) [L6218] ldvarg7 = (char *)tmp [L6219] tmp___0 = __VERIFIER_nondet_u16() [L6220] ldvarg3 = tmp___0 [L6221] tmp___1 = __VERIFIER_nondet_u16() [L6222] ldvarg0 = tmp___1 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg3=6, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5] [L6223] CALL, EXPR ldv_zalloc(72UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=72, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=72, tmp___0=1] [L6223] RET, EXPR ldv_zalloc(72UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(72UL)={0:0}, ldvarg0=5, ldvarg3=6, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5] [L6223] tmp___2 = ldv_zalloc(72UL) [L6224] ldvarg8 = (struct usb_host_endpoint *)tmp___2 [L6225] tmp___3 = __VERIFIER_nondet_u16() [L6226] ldvarg1 = tmp___3 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg1=1, ldvarg3=6, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1] [L6227] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=1] [L6227] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, ldvarg0=5, ldvarg1=1, ldvarg3=6, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1] [L6227] tmp___4 = ldv_zalloc(1UL) [L6228] ldvarg4 = (char *)tmp___4 [L6229] tmp___5 = __VERIFIER_nondet_int() [L6230] ldvarg9 = tmp___5 [L6231] tmp___6 = __VERIFIER_nondet_u16() [L6232] ldvarg2 = tmp___6 [L6233] FCALL ldv_initialize() [L6234] ldvarg5 = (gfp_t)__VERIFIER_nondet_int() [L6235] ldvarg6 = (gfp_t)__VERIFIER_nondet_int() [L6236] ldv_state_variable_1 = 1 [L6237] ref_cnt = 0 [L6238] ldv_state_variable_0 = 1 [L6239] ldv_state_variable_3 = 0 [L6240] ldv_state_variable_2 = 0 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=1] [L6251] COND TRUE ldv_state_variable_0 != 0 [L6252] tmp___8 = __VERIFIER_nondet_int() [L6254] case 0: [L6262] case 1: VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=1, tmp___8=1] [L6263] COND TRUE ldv_state_variable_0 == 1 [L6264] CALL, EXPR max3421_driver_init() [L6032] int tmp ; [L6034] CALL, EXPR spi_register_driver(& max3421_driver) [L6691] return __VERIFIER_nondet_int(); [L6034] RET, EXPR spi_register_driver(& max3421_driver) [L6034] tmp = spi_register_driver(& max3421_driver) [L6035] return (tmp); VAL [\result=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp=0] [L6264] RET, EXPR max3421_driver_init() [L6264] ldv_retval_0 = max3421_driver_init() [L6265] COND TRUE ldv_retval_0 == 0 [L6266] ldv_state_variable_0 = 3 [L6267] ldv_state_variable_2 = 1 [L6268] CALL ldv_initialize_spi_driver_2() [L6159] void *tmp ; VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] CALL, EXPR ldv_zalloc(1496UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1496, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1496, tmp___0=1] [L6161] RET, EXPR ldv_zalloc(1496UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_zalloc(1496UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] tmp = ldv_zalloc(1496UL) [L6162] max3421_driver_group0 = (struct spi_device *)tmp VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6268] RET ldv_initialize_spi_driver_2() [L6269] ldv_state_variable_3 = 1 [L6270] CALL ldv_initialize_hc_driver_3() [L6122] void *tmp ; [L6123] void *tmp___0 ; VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] CALL, EXPR ldv_zalloc(192UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=192, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=192, tmp___0=1] [L6125] RET, EXPR ldv_zalloc(192UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(192UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] tmp = ldv_zalloc(192UL) [L6126] max3421_hcd_desc_group0 = (struct urb *)tmp VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] CALL, EXPR ldv_zalloc(968UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=968, \result={0:0}, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=968, tmp___0=1] [L6127] RET, EXPR ldv_zalloc(968UL) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(968UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] tmp___0 = ldv_zalloc(968UL) [L6128] max3421_hcd_desc_group1 = (struct usb_hcd *)tmp___0 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}] [L6270] RET ldv_initialize_hc_driver_3() [L6273] COND FALSE !(ldv_retval_0 != 0) VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=1, tmp___8=1] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: [L6288] case 2: VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=2, tmp___8=1] [L6289] COND TRUE ldv_state_variable_3 != 0 [L6290] tmp___9 = __VERIFIER_nondet_int() [L6292] case 0: [L6303] case 1: [L6315] case 2: [L6327] case 3: [L6339] case 4: [L6351] case 5: [L6363] case 6: [L6375] case 7: [L6387] case 8: [L6395] case 9: [L6407] case 10: VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=2, tmp___8=1, tmp___9=10] [L6408] COND TRUE ldv_state_variable_3 == 1 VAL [__this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=5, ldvarg1=1, ldvarg2=7, ldvarg3=6, ldvarg4={0:0}, ldvarg5=4294967293, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=-2, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=6, tmp___1=5, tmp___2={0:0}, tmp___3=1, tmp___4={0:0}, tmp___5=-2, tmp___6=7, tmp___7=2, tmp___8=1, tmp___9=10] [L6409] CALL max3421_urb_enqueue(max3421_hcd_desc_group1, max3421_hcd_desc_group0, ldvarg5) VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5535] struct spi_device *spi ; [L5536] struct spi_device *tmp ; [L5537] struct max3421_hcd *max3421_hcd ; [L5538] struct max3421_hcd *tmp___0 ; [L5539] struct max3421_ep *max3421_ep ; [L5540] unsigned long flags ; [L5541] int retval ; [L5542] void *tmp___1 ; [L5544] EXPR hcd->self.controller VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hcd->self.controller={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, urb={0:0}, urb={0:0}] [L5544] CALL, EXPR to_spi_device(hcd->self.controller) VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, dev={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4062] struct device const *__mptr ; [L4063] struct spi_device *tmp ; VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, dev={-89:90}, dev={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4065] COND TRUE (unsigned long )dev != (unsigned long )((struct device *)0) [L4066] __mptr = (struct device const *)dev [L4067] tmp = (struct spi_device *)__mptr VAL [\old(ldv_spin)=0, __mptr={-89:90}, __this_module={97710505986:97710505987}, dev={-89:90}, dev={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={-89:90}] [L4071] return (tmp); VAL [\old(ldv_spin)=0, \result={-89:90}, __mptr={-89:90}, __this_module={97710505986:97710505987}, dev={-89:90}, dev={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={-89:90}] [L5544] RET, EXPR to_spi_device(hcd->self.controller) VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hcd->self.controller={-89:90}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, to_spi_device(hcd->self.controller)={-89:90}, urb={0:0}, urb={0:0}] [L5544] tmp = to_spi_device(hcd->self.controller) [L5545] spi = tmp VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, urb={0:0}, urb={0:0}] [L5546] CALL, EXPR hcd_to_max3421(hcd) VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4223] return ((struct max3421_hcd *)(& hcd->hcd_priv)); VAL [\old(ldv_spin)=0, \result={0:899}, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5546] RET, EXPR hcd_to_max3421(hcd) VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hcd_to_max3421(hcd)={0:899}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, urb={0:0}, urb={0:0}] [L5546] tmp___0 = hcd_to_max3421(hcd) [L5547] max3421_hcd = tmp___0 [L5548] urb->pipe [L5549] case 1U: VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=97710505984] [L5550] case 0U: VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=97710505984] [L5557] default: VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=97710505984] [L5561] CALL ldv_spin_lock() VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6582] ldv_spin = 1 VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5561] RET ldv_spin_lock() VAL [\old(ldv_spin)=0, \old(mem_flags)=4294967293, __this_module={97710505986:97710505987}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=4294967293, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=97710505984] [L5562] EXPR urb->ep [L5562] EXPR (urb->ep)->hcpriv [L5562] max3421_ep = (struct max3421_ep *)(urb->ep)->hcpriv [L5563] COND TRUE (unsigned long )max3421_ep == (unsigned long )((struct max3421_ep *)0) [L5564] CALL kzalloc(40UL, mem_flags) [L6513] CALL ldv_check_alloc_flags(flags) VAL [\old(flags)=4294967293, \old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6549] COND FALSE !(ldv_spin == 0 || ! (flags & 16U)) VAL [\old(flags)=4294967293, \old(ldv_spin)=0, __this_module={97710505986:97710505987}, flags=4294967293, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6551] CALL ldv_error() VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3987] reach_error() VAL [\old(ldv_spin)=0, __this_module={97710505986:97710505987}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 35 procedures, 536 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.3s, OverallIterations: 5, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3195 SdHoareTripleChecker+Valid, 3.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3015 mSDsluCounter, 7755 SdHoareTripleChecker+Invalid, 2.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4904 mSDsCounter, 1662 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2485 IncrementalHoareTripleChecker+Invalid, 4147 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1662 mSolverCounterUnsat, 2851 mSDtfsCounter, 2485 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 99 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1226occurred in iteration=4, InterpolantAutomatonStates: 35, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 4 MinimizatonAttempts, 369 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 414 NumberOfCodeBlocks, 414 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 311 ConstructedInterpolants, 0 QuantifiedInterpolants, 633 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 150/150 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-14 17:47:53,838 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 --- Real Ultimate output --- This is Ultimate 0.2.2-839c364b5d67a0f615c82cb70ab247790648d4a9-839c364 [2021-12-14 17:47:55,625 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-14 17:47:55,627 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-14 17:47:55,660 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-14 17:47:55,661 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-14 17:47:55,664 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-14 17:47:55,665 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-14 17:47:55,668 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-14 17:47:55,670 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-14 17:47:55,673 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-14 17:47:55,674 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-14 17:47:55,677 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-14 17:47:55,677 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-14 17:47:55,679 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-14 17:47:55,680 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-14 17:47:55,683 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-14 17:47:55,683 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-14 17:47:55,684 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-14 17:47:55,685 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-14 17:47:55,689 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-14 17:47:55,690 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-14 17:47:55,691 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-14 17:47:55,691 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-14 17:47:55,693 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-14 17:47:55,701 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-14 17:47:55,701 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-14 17:47:55,702 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-14 17:47:55,703 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-14 17:47:55,703 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-14 17:47:55,704 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-14 17:47:55,704 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-14 17:47:55,704 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-14 17:47:55,705 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-14 17:47:55,706 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-14 17:47:55,707 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-14 17:47:55,707 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-14 17:47:55,707 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-14 17:47:55,707 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-14 17:47:55,707 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-14 17:47:55,708 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-14 17:47:55,709 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-14 17:47:55,710 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-14 17:47:55,733 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-14 17:47:55,733 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-14 17:47:55,734 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-14 17:47:55,734 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-14 17:47:55,735 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-14 17:47:55,735 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-14 17:47:55,736 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-14 17:47:55,736 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-14 17:47:55,736 INFO L138 SettingsManager]: * Use SBE=true [2021-12-14 17:47:55,736 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-14 17:47:55,737 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-14 17:47:55,737 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-14 17:47:55,737 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-14 17:47:55,737 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-14 17:47:55,738 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-14 17:47:55,738 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-14 17:47:55,738 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-14 17:47:55,738 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-14 17:47:55,738 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-14 17:47:55,739 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-14 17:47:55,739 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-14 17:47:55,739 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-14 17:47:55,739 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-14 17:47:55,739 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-14 17:47:55,739 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-14 17:47:55,739 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-14 17:47:55,740 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-14 17:47:55,740 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-14 17:47:55,740 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-14 17:47:55,740 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-14 17:47:55,740 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-14 17:47:55,740 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-14 17:47:55,741 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-14 17:47:55,741 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-14 17:47:55,741 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 [2021-12-14 17:47:55,989 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-14 17:47:56,004 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-14 17:47:56,006 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-14 17:47:56,007 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-14 17:47:56,008 INFO L275 PluginConnector]: CDTParser initialized [2021-12-14 17:47:56,009 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-14 17:47:56,052 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/27eb54ae4/e14b6b34375045e5b80aa628e20f5460/FLAG88db18e29 [2021-12-14 17:47:56,594 INFO L306 CDTParser]: Found 1 translation units. [2021-12-14 17:47:56,595 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-14 17:47:56,623 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/27eb54ae4/e14b6b34375045e5b80aa628e20f5460/FLAG88db18e29 [2021-12-14 17:47:56,799 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/27eb54ae4/e14b6b34375045e5b80aa628e20f5460 [2021-12-14 17:47:56,801 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-14 17:47:56,802 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-14 17:47:56,803 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-14 17:47:56,803 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-14 17:47:56,807 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-14 17:47:56,807 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:47:56" (1/1) ... [2021-12-14 17:47:56,808 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5008d196 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:56, skipping insertion in model container [2021-12-14 17:47:56,808 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:47:56" (1/1) ... [2021-12-14 17:47:56,812 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-14 17:47:56,879 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-14 17:47:57,220 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-14 17:47:57,220 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-14 17:47:57,311 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-14 17:47:57,664 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:47:57,691 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-14 17:47:57,723 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-14 17:47:57,770 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-14 17:47:57,771 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-14 17:47:57,780 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-14 17:47:57,934 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:47:57,947 INFO L203 MainTranslator]: Completed pre-run [2021-12-14 17:47:58,020 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2021-12-14 17:47:58,020 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2021-12-14 17:47:58,041 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2021-12-14 17:47:58,182 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:47:58,221 INFO L208 MainTranslator]: Completed translation [2021-12-14 17:47:58,222 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58 WrapperNode [2021-12-14 17:47:58,222 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-14 17:47:58,223 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-14 17:47:58,223 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-14 17:47:58,224 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-14 17:47:58,238 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,298 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,368 INFO L137 Inliner]: procedures = 178, calls = 1019, calls flagged for inlining = 80, calls inlined = 51, statements flattened = 1492 [2021-12-14 17:47:58,368 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-14 17:47:58,369 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-14 17:47:58,369 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-14 17:47:58,370 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-14 17:47:58,375 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,376 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,390 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,391 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,424 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,432 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,438 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,449 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-14 17:47:58,450 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-14 17:47:58,450 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-14 17:47:58,450 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-14 17:47:58,451 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (1/1) ... [2021-12-14 17:47:58,465 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-14 17:47:58,474 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-14 17:47:58,491 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-14 17:47:58,497 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-14 17:47:58,554 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-14 17:47:58,555 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_map_urb_for_dma [2021-12-14 17:47:58,555 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_map_urb_for_dma [2021-12-14 17:47:58,555 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2021-12-14 17:47:58,555 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2021-12-14 17:47:58,555 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-14 17:47:58,555 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-14 17:47:58,556 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-14 17:47:58,556 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2021-12-14 17:47:58,556 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2021-12-14 17:47:58,556 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-14 17:47:58,556 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-14 17:47:58,556 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2021-12-14 17:47:58,557 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2021-12-14 17:47:58,557 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-14 17:47:58,557 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-14 17:47:58,557 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2021-12-14 17:47:58,557 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2021-12-14 17:47:58,557 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_control [2021-12-14 17:47:58,557 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_control [2021-12-14 17:47:58,558 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_dequeue [2021-12-14 17:47:58,558 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_dequeue [2021-12-14 17:47:58,558 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-14 17:47:58,558 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-14 17:47:58,559 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2021-12-14 17:47:58,559 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2021-12-14 17:47:58,559 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_endpoint_disable [2021-12-14 17:47:58,559 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_endpoint_disable [2021-12-14 17:47:58,560 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-14 17:47:58,560 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-14 17:47:58,560 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-14 17:47:58,560 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-14 17:47:58,560 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2021-12-14 17:47:58,560 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-14 17:47:58,560 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-14 17:47:58,561 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_reset [2021-12-14 17:47:58,561 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_reset [2021-12-14 17:47:58,561 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_enqueue [2021-12-14 17:47:58,561 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_enqueue [2021-12-14 17:47:58,561 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-14 17:47:58,562 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-14 17:47:58,562 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-14 17:47:58,562 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_resume [2021-12-14 17:47:58,562 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_resume [2021-12-14 17:47:58,563 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-14 17:47:58,564 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_gpout_set_value [2021-12-14 17:47:58,564 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_gpout_set_value [2021-12-14 17:47:58,564 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-14 17:47:58,564 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-14 17:47:58,565 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-14 17:47:58,565 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-14 17:47:58,565 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2021-12-14 17:47:58,565 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2021-12-14 17:47:58,565 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2021-12-14 17:47:58,565 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2021-12-14 17:47:58,566 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-14 17:47:58,566 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2021-12-14 17:47:58,566 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2021-12-14 17:47:58,566 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-14 17:47:58,566 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-14 17:47:58,566 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-14 17:47:58,566 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-14 17:47:58,567 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-14 17:47:58,567 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_unmap_urb_for_dma [2021-12-14 17:47:58,568 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_unmap_urb_for_dma [2021-12-14 17:47:58,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-14 17:47:58,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-14 17:47:58,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-14 17:47:58,568 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-14 17:47:58,568 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-14 17:47:58,568 INFO L130 BoogieDeclarations]: Found specification of procedure to_spi_device [2021-12-14 17:47:58,569 INFO L138 BoogieDeclarations]: Found implementation of procedure to_spi_device [2021-12-14 17:47:58,569 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2021-12-14 17:47:58,569 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2021-12-14 17:47:58,569 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_suspend [2021-12-14 17:47:58,569 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_suspend [2021-12-14 17:47:58,570 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_get_frame_number [2021-12-14 17:47:58,570 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_get_frame_number [2021-12-14 17:47:58,570 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-14 17:47:58,570 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-14 17:47:58,570 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-14 17:47:58,571 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-14 17:47:58,571 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_status_data [2021-12-14 17:47:58,571 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_status_data [2021-12-14 17:47:58,571 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_max3421 [2021-12-14 17:47:58,572 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_max3421 [2021-12-14 17:47:58,572 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2021-12-14 17:47:58,573 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2021-12-14 17:47:58,908 INFO L236 CfgBuilder]: Building ICFG [2021-12-14 17:47:58,910 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-14 17:47:59,159 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-14 17:48:04,659 INFO L277 CfgBuilder]: Performing block encoding [2021-12-14 17:48:04,671 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-14 17:48:04,673 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-14 17:48:04,675 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:48:04 BoogieIcfgContainer [2021-12-14 17:48:04,675 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-14 17:48:04,676 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-14 17:48:04,677 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-14 17:48:04,678 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-14 17:48:04,679 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 05:47:56" (1/3) ... [2021-12-14 17:48:04,679 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@412e326 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:48:04, skipping insertion in model container [2021-12-14 17:48:04,679 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:47:58" (2/3) ... [2021-12-14 17:48:04,680 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@412e326 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:48:04, skipping insertion in model container [2021-12-14 17:48:04,680 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:48:04" (3/3) ... [2021-12-14 17:48:04,681 INFO L111 eAbstractionObserver]: Analyzing ICFG 43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2021-12-14 17:48:04,684 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-14 17:48:04,684 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-14 17:48:04,715 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-14 17:48:04,719 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-14 17:48:04,720 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-14 17:48:04,737 INFO L276 IsEmpty]: Start isEmpty. Operand has 535 states, 395 states have (on average 1.379746835443038) internal successors, (545), 405 states have internal predecessors, (545), 105 states have call successors, (105), 34 states have call predecessors, (105), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) [2021-12-14 17:48:04,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-14 17:48:04,748 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:48:04,749 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:48:04,749 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:48:04,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:48:04,756 INFO L85 PathProgramCache]: Analyzing trace with hash -1460430108, now seen corresponding path program 1 times [2021-12-14 17:48:04,766 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:48:04,766 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [323462458] [2021-12-14 17:48:04,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:48:04,767 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:48:04,767 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:48:04,769 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:48:04,770 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-14 17:48:05,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:48:05,130 INFO L263 TraceCheckSpWp]: Trace formula consists of 650 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-14 17:48:05,135 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:48:05,330 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-14 17:48:05,330 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-14 17:48:05,330 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-14 17:48:05,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [323462458] [2021-12-14 17:48:05,331 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [323462458] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:48:05,331 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:48:05,331 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-14 17:48:05,332 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428791860] [2021-12-14 17:48:05,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:48:05,335 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-14 17:48:05,335 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-14 17:48:05,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-14 17:48:05,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-14 17:48:05,360 INFO L87 Difference]: Start difference. First operand has 535 states, 395 states have (on average 1.379746835443038) internal successors, (545), 405 states have internal predecessors, (545), 105 states have call successors, (105), 34 states have call predecessors, (105), 33 states have return successors, (99), 99 states have call predecessors, (99), 99 states have call successors, (99) Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:48:05,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:48:05,564 INFO L93 Difference]: Finished difference Result 1473 states and 2085 transitions. [2021-12-14 17:48:05,565 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-14 17:48:05,566 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 58 [2021-12-14 17:48:05,566 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:48:05,581 INFO L225 Difference]: With dead ends: 1473 [2021-12-14 17:48:05,582 INFO L226 Difference]: Without dead ends: 910 [2021-12-14 17:48:05,589 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 57 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-14 17:48:05,597 INFO L933 BasicCegarLoop]: 816 mSDtfsCounter, 569 mSDsluCounter, 724 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 569 SdHoareTripleChecker+Valid, 1540 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-14 17:48:05,597 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [569 Valid, 1540 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-14 17:48:05,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 910 states. [2021-12-14 17:48:05,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 910 to 907. [2021-12-14 17:48:05,750 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 907 states, 675 states have (on average 1.3644444444444443) internal successors, (921), 678 states have internal predecessors, (921), 171 states have call successors, (171), 61 states have call predecessors, (171), 60 states have return successors, (170), 170 states have call predecessors, (170), 170 states have call successors, (170) [2021-12-14 17:48:05,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 907 states to 907 states and 1262 transitions. [2021-12-14 17:48:05,762 INFO L78 Accepts]: Start accepts. Automaton has 907 states and 1262 transitions. Word has length 58 [2021-12-14 17:48:05,762 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:48:05,762 INFO L470 AbstractCegarLoop]: Abstraction has 907 states and 1262 transitions. [2021-12-14 17:48:05,763 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:48:05,763 INFO L276 IsEmpty]: Start isEmpty. Operand 907 states and 1262 transitions. [2021-12-14 17:48:05,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-12-14 17:48:05,773 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:48:05,774 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:48:05,803 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-14 17:48:05,991 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:48:05,992 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:48:05,993 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:48:05,993 INFO L85 PathProgramCache]: Analyzing trace with hash 773574401, now seen corresponding path program 1 times [2021-12-14 17:48:05,994 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:48:05,994 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [456334104] [2021-12-14 17:48:05,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:48:05,995 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:48:05,996 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:48:05,997 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:48:05,998 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-14 17:48:06,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:48:06,372 INFO L263 TraceCheckSpWp]: Trace formula consists of 615 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-14 17:48:06,375 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:48:06,523 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-14 17:48:06,523 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-14 17:48:06,523 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-14 17:48:06,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [456334104] [2021-12-14 17:48:06,523 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [456334104] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:48:06,523 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:48:06,523 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-14 17:48:06,524 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [724613160] [2021-12-14 17:48:06,524 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:48:06,525 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-14 17:48:06,525 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-14 17:48:06,525 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-14 17:48:06,525 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-14 17:48:06,525 INFO L87 Difference]: Start difference. First operand 907 states and 1262 transitions. Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:48:06,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:48:06,820 INFO L93 Difference]: Finished difference Result 2081 states and 2880 transitions. [2021-12-14 17:48:06,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-14 17:48:06,821 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 68 [2021-12-14 17:48:06,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:48:06,842 INFO L225 Difference]: With dead ends: 2081 [2021-12-14 17:48:06,842 INFO L226 Difference]: Without dead ends: 1201 [2021-12-14 17:48:06,848 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-14 17:48:06,849 INFO L933 BasicCegarLoop]: 847 mSDtfsCounter, 296 mSDsluCounter, 634 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 296 SdHoareTripleChecker+Valid, 1481 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-14 17:48:06,849 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [296 Valid, 1481 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-14 17:48:06,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1201 states. [2021-12-14 17:48:06,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1201 to 1196. [2021-12-14 17:48:06,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1196 states, 903 states have (on average 1.3565891472868217) internal successors, (1225), 908 states have internal predecessors, (1225), 210 states have call successors, (210), 83 states have call predecessors, (210), 82 states have return successors, (209), 208 states have call predecessors, (209), 209 states have call successors, (209) [2021-12-14 17:48:06,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1196 states to 1196 states and 1644 transitions. [2021-12-14 17:48:06,912 INFO L78 Accepts]: Start accepts. Automaton has 1196 states and 1644 transitions. Word has length 68 [2021-12-14 17:48:06,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:48:06,913 INFO L470 AbstractCegarLoop]: Abstraction has 1196 states and 1644 transitions. [2021-12-14 17:48:06,913 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:48:06,913 INFO L276 IsEmpty]: Start isEmpty. Operand 1196 states and 1644 transitions. [2021-12-14 17:48:06,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2021-12-14 17:48:06,917 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:48:06,918 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:48:06,935 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-12-14 17:48:07,135 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:48:07,136 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:48:07,136 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:48:07,137 INFO L85 PathProgramCache]: Analyzing trace with hash -1703027901, now seen corresponding path program 1 times [2021-12-14 17:48:07,137 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:48:07,137 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [379762066] [2021-12-14 17:48:07,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:48:07,138 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:48:07,138 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:48:07,139 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:48:07,140 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-14 17:48:07,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:48:07,538 INFO L263 TraceCheckSpWp]: Trace formula consists of 732 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-14 17:48:07,541 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:48:07,774 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2021-12-14 17:48:07,774 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-14 17:48:07,774 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-14 17:48:07,775 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [379762066] [2021-12-14 17:48:07,775 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [379762066] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:48:07,776 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:48:07,776 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-14 17:48:07,776 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [413972488] [2021-12-14 17:48:07,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:48:07,776 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-14 17:48:07,777 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-14 17:48:07,777 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-14 17:48:07,777 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-14 17:48:07,777 INFO L87 Difference]: Start difference. First operand 1196 states and 1644 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-14 17:48:08,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:48:08,093 INFO L93 Difference]: Finished difference Result 3184 states and 4558 transitions. [2021-12-14 17:48:08,095 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-14 17:48:08,096 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) Word has length 89 [2021-12-14 17:48:08,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:48:08,108 INFO L225 Difference]: With dead ends: 3184 [2021-12-14 17:48:08,109 INFO L226 Difference]: Without dead ends: 2018 [2021-12-14 17:48:08,113 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-14 17:48:08,114 INFO L933 BasicCegarLoop]: 1212 mSDtfsCounter, 448 mSDsluCounter, 4198 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 485 SdHoareTripleChecker+Valid, 5410 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-14 17:48:08,114 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [485 Valid, 5410 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-14 17:48:08,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2018 states. [2021-12-14 17:48:08,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2018 to 1208. [2021-12-14 17:48:08,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1208 states, 913 states have (on average 1.352683461117196) internal successors, (1235), 918 states have internal predecessors, (1235), 210 states have call successors, (210), 83 states have call predecessors, (210), 84 states have return successors, (213), 210 states have call predecessors, (213), 209 states have call successors, (213) [2021-12-14 17:48:08,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1208 states to 1208 states and 1658 transitions. [2021-12-14 17:48:08,169 INFO L78 Accepts]: Start accepts. Automaton has 1208 states and 1658 transitions. Word has length 89 [2021-12-14 17:48:08,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:48:08,170 INFO L470 AbstractCegarLoop]: Abstraction has 1208 states and 1658 transitions. [2021-12-14 17:48:08,170 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-14 17:48:08,170 INFO L276 IsEmpty]: Start isEmpty. Operand 1208 states and 1658 transitions. [2021-12-14 17:48:08,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2021-12-14 17:48:08,174 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:48:08,174 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:48:08,201 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-12-14 17:48:08,393 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:48:08,394 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:48:08,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:48:08,394 INFO L85 PathProgramCache]: Analyzing trace with hash 1234457031, now seen corresponding path program 1 times [2021-12-14 17:48:08,395 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:48:08,396 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1500785251] [2021-12-14 17:48:08,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:48:08,396 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:48:08,396 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:48:08,397 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:48:08,397 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-14 17:48:08,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:48:08,744 INFO L263 TraceCheckSpWp]: Trace formula consists of 698 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-14 17:48:08,746 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:48:08,966 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-12-14 17:48:08,966 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-14 17:48:08,967 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-14 17:48:08,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1500785251] [2021-12-14 17:48:08,967 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1500785251] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:48:08,967 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:48:08,967 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-14 17:48:08,967 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1106428270] [2021-12-14 17:48:08,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:48:08,967 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-14 17:48:08,967 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-14 17:48:08,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-14 17:48:08,968 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-14 17:48:08,968 INFO L87 Difference]: Start difference. First operand 1208 states and 1658 transitions. Second operand has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-14 17:48:09,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:48:09,222 INFO L93 Difference]: Finished difference Result 3158 states and 4354 transitions. [2021-12-14 17:48:09,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-14 17:48:09,222 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 100 [2021-12-14 17:48:09,223 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:48:09,230 INFO L225 Difference]: With dead ends: 3158 [2021-12-14 17:48:09,230 INFO L226 Difference]: Without dead ends: 1980 [2021-12-14 17:48:09,235 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 98 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-14 17:48:09,236 INFO L933 BasicCegarLoop]: 948 mSDtfsCounter, 610 mSDsluCounter, 605 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 610 SdHoareTripleChecker+Valid, 1553 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-14 17:48:09,237 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [610 Valid, 1553 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-14 17:48:09,240 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1980 states. [2021-12-14 17:48:09,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1980 to 1975. [2021-12-14 17:48:09,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1975 states, 1510 states have (on average 1.3410596026490067) internal successors, (2025), 1519 states have internal predecessors, (2025), 323 states have call successors, (323), 139 states have call predecessors, (323), 141 states have return successors, (328), 323 states have call predecessors, (328), 322 states have call successors, (328) [2021-12-14 17:48:09,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1975 states to 1975 states and 2676 transitions. [2021-12-14 17:48:09,290 INFO L78 Accepts]: Start accepts. Automaton has 1975 states and 2676 transitions. Word has length 100 [2021-12-14 17:48:09,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:48:09,291 INFO L470 AbstractCegarLoop]: Abstraction has 1975 states and 2676 transitions. [2021-12-14 17:48:09,291 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-14 17:48:09,291 INFO L276 IsEmpty]: Start isEmpty. Operand 1975 states and 2676 transitions. [2021-12-14 17:48:09,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-14 17:48:09,295 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:48:09,295 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:48:09,309 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-12-14 17:48:09,506 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:48:09,507 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:48:09,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:48:09,507 INFO L85 PathProgramCache]: Analyzing trace with hash -1464572768, now seen corresponding path program 1 times [2021-12-14 17:48:09,508 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:48:09,508 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1981710302] [2021-12-14 17:48:09,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:48:09,508 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:48:09,508 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:48:09,509 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:48:09,511 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-14 17:48:09,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:48:09,855 INFO L263 TraceCheckSpWp]: Trace formula consists of 697 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-14 17:48:09,857 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:48:10,009 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2021-12-14 17:48:10,009 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-14 17:48:10,010 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-14 17:48:10,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1981710302] [2021-12-14 17:48:10,010 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1981710302] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:48:10,010 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:48:10,010 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-14 17:48:10,010 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1636819363] [2021-12-14 17:48:10,010 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:48:10,011 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-14 17:48:10,011 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-14 17:48:10,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-14 17:48:10,011 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-14 17:48:10,012 INFO L87 Difference]: Start difference. First operand 1975 states and 2676 transitions. Second operand has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-14 17:48:10,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:48:10,087 INFO L93 Difference]: Finished difference Result 3928 states and 5334 transitions. [2021-12-14 17:48:10,087 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-14 17:48:10,087 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 99 [2021-12-14 17:48:10,088 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:48:10,094 INFO L225 Difference]: With dead ends: 3928 [2021-12-14 17:48:10,095 INFO L226 Difference]: Without dead ends: 1983 [2021-12-14 17:48:10,099 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 97 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-14 17:48:10,099 INFO L933 BasicCegarLoop]: 717 mSDtfsCounter, 18 mSDsluCounter, 690 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 1407 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-14 17:48:10,100 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [23 Valid, 1407 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-14 17:48:10,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1983 states. [2021-12-14 17:48:10,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1983 to 1979. [2021-12-14 17:48:10,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1979 states, 1514 states have (on average 1.3375165125495376) internal successors, (2025), 1523 states have internal predecessors, (2025), 323 states have call successors, (323), 139 states have call predecessors, (323), 141 states have return successors, (328), 323 states have call predecessors, (328), 322 states have call successors, (328) [2021-12-14 17:48:10,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1979 states to 1979 states and 2676 transitions. [2021-12-14 17:48:10,167 INFO L78 Accepts]: Start accepts. Automaton has 1979 states and 2676 transitions. Word has length 99 [2021-12-14 17:48:10,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:48:10,168 INFO L470 AbstractCegarLoop]: Abstraction has 1979 states and 2676 transitions. [2021-12-14 17:48:10,168 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-14 17:48:10,168 INFO L276 IsEmpty]: Start isEmpty. Operand 1979 states and 2676 transitions. [2021-12-14 17:48:10,171 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-14 17:48:10,171 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:48:10,171 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:48:10,200 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-12-14 17:48:10,386 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:48:10,387 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:48:10,387 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:48:10,392 INFO L85 PathProgramCache]: Analyzing trace with hash 1809326174, now seen corresponding path program 1 times [2021-12-14 17:48:10,392 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:48:10,392 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1722990272] [2021-12-14 17:48:10,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:48:10,393 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:48:10,393 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:48:10,404 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:48:10,451 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-14 17:48:10,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-14 17:48:10,857 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-14 17:48:11,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-14 17:48:11,343 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-14 17:48:11,344 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-14 17:48:11,344 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-14 17:48:11,364 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-12-14 17:48:11,563 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:48:11,567 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1] [2021-12-14 17:48:11,569 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-14 17:48:11,680 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 05:48:11 BoogieIcfgContainer [2021-12-14 17:48:11,680 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-14 17:48:11,680 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-14 17:48:11,681 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-14 17:48:11,681 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-14 17:48:11,681 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:48:04" (3/4) ... [2021-12-14 17:48:11,683 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-14 17:48:11,683 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-14 17:48:11,683 INFO L158 Benchmark]: Toolchain (without parser) took 14881.09ms. Allocated memory was 52.4MB in the beginning and 291.5MB in the end (delta: 239.1MB). Free memory was 32.6MB in the beginning and 140.8MB in the end (delta: -108.1MB). Peak memory consumption was 129.0MB. Max. memory is 16.1GB. [2021-12-14 17:48:11,684 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 52.4MB. Free memory is still 34.8MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-14 17:48:11,684 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1419.02ms. Allocated memory was 52.4MB in the beginning and 107.0MB in the end (delta: 54.5MB). Free memory was 32.3MB in the beginning and 42.9MB in the end (delta: -10.5MB). Peak memory consumption was 51.0MB. Max. memory is 16.1GB. [2021-12-14 17:48:11,684 INFO L158 Benchmark]: Boogie Procedure Inliner took 145.59ms. Allocated memory is still 107.0MB. Free memory was 42.9MB in the beginning and 52.1MB in the end (delta: -9.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-14 17:48:11,684 INFO L158 Benchmark]: Boogie Preprocessor took 79.90ms. Allocated memory is still 107.0MB. Free memory was 52.1MB in the beginning and 41.6MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-14 17:48:11,684 INFO L158 Benchmark]: RCFGBuilder took 6225.72ms. Allocated memory was 107.0MB in the beginning and 184.5MB in the end (delta: 77.6MB). Free memory was 41.6MB in the beginning and 124.9MB in the end (delta: -83.3MB). Peak memory consumption was 52.3MB. Max. memory is 16.1GB. [2021-12-14 17:48:11,685 INFO L158 Benchmark]: TraceAbstraction took 7003.63ms. Allocated memory was 184.5MB in the beginning and 291.5MB in the end (delta: 107.0MB). Free memory was 123.8MB in the beginning and 141.8MB in the end (delta: -18.0MB). Peak memory consumption was 89.0MB. Max. memory is 16.1GB. [2021-12-14 17:48:11,685 INFO L158 Benchmark]: Witness Printer took 2.67ms. Allocated memory is still 291.5MB. Free memory was 141.8MB in the beginning and 140.8MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-14 17:48:11,686 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 52.4MB. Free memory is still 34.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1419.02ms. Allocated memory was 52.4MB in the beginning and 107.0MB in the end (delta: 54.5MB). Free memory was 32.3MB in the beginning and 42.9MB in the end (delta: -10.5MB). Peak memory consumption was 51.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 145.59ms. Allocated memory is still 107.0MB. Free memory was 42.9MB in the beginning and 52.1MB in the end (delta: -9.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 79.90ms. Allocated memory is still 107.0MB. Free memory was 52.1MB in the beginning and 41.6MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 6225.72ms. Allocated memory was 107.0MB in the beginning and 184.5MB in the end (delta: 77.6MB). Free memory was 41.6MB in the beginning and 124.9MB in the end (delta: -83.3MB). Peak memory consumption was 52.3MB. Max. memory is 16.1GB. * TraceAbstraction took 7003.63ms. Allocated memory was 184.5MB in the beginning and 291.5MB in the end (delta: 107.0MB). Free memory was 123.8MB in the beginning and 141.8MB in the end (delta: -18.0MB). Peak memory consumption was 89.0MB. Max. memory is 16.1GB. * Witness Printer took 2.67ms. Allocated memory is still 291.5MB. Free memory was 141.8MB in the beginning and 140.8MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 3987]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 5883. Possible FailurePath: [L4010] int ldv_irq_1_2 = 0; [L4011] int LDV_IN_INTERRUPT = 1; [L4012] int ldv_irq_1_3 = 0; [L4013] void *ldv_irq_data_1_1 ; [L4014] int ldv_irq_1_1 = 0; [L4015] int ldv_irq_1_0 = 0; [L4016] struct urb *max3421_hcd_desc_group0 ; [L4017] int ldv_irq_line_1_3 ; [L4018] void *ldv_irq_data_1_0 ; [L4019] int ldv_state_variable_0 ; [L4020] struct usb_hcd *max3421_hcd_desc_group1 ; [L4021] int ldv_state_variable_3 ; [L4022] int ldv_irq_line_1_0 ; [L4023] int ldv_state_variable_2 ; [L4024] void *ldv_irq_data_1_3 ; [L4025] struct spi_device *max3421_driver_group0 ; [L4026] int ref_cnt ; [L4027] int ldv_irq_line_1_1 ; [L4028] void *ldv_irq_data_1_2 ; [L4029] int ldv_state_variable_1 ; [L4030] int ldv_irq_line_1_2 ; [L4208] static struct max3421_hcd *max3421_hcd_list ; [L4209-L4213] static int const hrsl_to_error[16U] = { 0, -22, -22, -22, -11, -32, -84, -71, -121, -71, -71, -84, -5, -5, -62, -75}; [L5882-L5888] static struct hc_driver max3421_hcd_desc = {"max3421", "MAX3421 USB Host-Controller Driver", 192UL, 0, 16, & max3421_reset, & max3421_start, 0, 0, & max3421_stop, 0, & max3421_get_frame_number, & max3421_urb_enqueue, & max3421_urb_dequeue, & max3421_map_urb_for_dma, & max3421_unmap_urb_for_dma, & max3421_endpoint_disable, 0, & max3421_hub_status_data, & max3421_hub_control, & max3421_bus_suspend, & max3421_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L6027-L6029] static struct spi_driver max3421_driver = {0, & max3421_probe, & max3421_remove, 0, 0, 0, {"max3421-hcd", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}; [L6045] int ldv_retval_0 ; [L6046] int ldv_retval_1 ; [L6049] int ldv_retval_2 ; [L6545] int ldv_spin = 0; VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6194] char *ldvarg7 ; [L6195] void *tmp ; [L6196] u16 ldvarg3 ; [L6197] u16 tmp___0 ; [L6198] u16 ldvarg0 ; [L6199] u16 tmp___1 ; [L6200] gfp_t ldvarg5 ; [L6201] gfp_t ldvarg6 ; [L6202] struct usb_host_endpoint *ldvarg8 ; [L6203] void *tmp___2 ; [L6204] u16 ldvarg1 ; [L6205] u16 tmp___3 ; [L6206] char *ldvarg4 ; [L6207] void *tmp___4 ; [L6208] int ldvarg9 ; [L6209] int tmp___5 ; [L6210] u16 ldvarg2 ; [L6211] u16 tmp___6 ; [L6212] int tmp___7 ; [L6213] int tmp___8 ; [L6214] int tmp___9 ; [L6215] int tmp___10 ; VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=2147483648] [L6217] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] tmp = ldv_zalloc(1UL) [L6218] ldvarg7 = (char *)tmp [L6219] tmp___0 = __VERIFIER_nondet_u16() [L6220] ldvarg3 = tmp___0 [L6221] tmp___1 = __VERIFIER_nondet_u16() [L6222] ldvarg0 = tmp___1 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg3=12, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13] [L6223] CALL, EXPR ldv_zalloc(72UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=72, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=72, tmp___0=2147483648] [L6223] RET, EXPR ldv_zalloc(72UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(72UL)={0:0}, ldvarg0=13, ldvarg3=12, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13] [L6223] tmp___2 = ldv_zalloc(72UL) [L6224] ldvarg8 = (struct usb_host_endpoint *)tmp___2 [L6225] tmp___3 = __VERIFIER_nondet_u16() [L6226] ldvarg1 = tmp___3 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg1=14, ldvarg3=12, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14] [L6227] CALL, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=2147483648] [L6227] RET, EXPR ldv_zalloc(1UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, ldvarg0=13, ldvarg1=14, ldvarg3=12, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14] [L6227] tmp___4 = ldv_zalloc(1UL) [L6228] ldvarg4 = (char *)tmp___4 [L6229] tmp___5 = __VERIFIER_nondet_int() [L6230] ldvarg9 = tmp___5 [L6231] tmp___6 = __VERIFIER_nondet_u16() [L6232] ldvarg2 = tmp___6 [L6233] FCALL ldv_initialize() [L6234] ldvarg5 = (gfp_t)__VERIFIER_nondet_int() [L6235] ldvarg6 = (gfp_t)__VERIFIER_nondet_int() [L6236] ldv_state_variable_1 = 1 [L6237] ref_cnt = 0 [L6238] ldv_state_variable_0 = 1 [L6239] ldv_state_variable_3 = 0 [L6240] ldv_state_variable_2 = 0 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=1] [L6251] COND TRUE ldv_state_variable_0 != 0 [L6252] tmp___8 = __VERIFIER_nondet_int() [L6254] case 0: [L6262] case 1: VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=1, tmp___8=1] [L6263] COND TRUE ldv_state_variable_0 == 1 [L6264] CALL, EXPR max3421_driver_init() [L6032] int tmp ; [L6034] CALL, EXPR spi_register_driver(& max3421_driver) [L6691] return __VERIFIER_nondet_int(); [L6034] RET, EXPR spi_register_driver(& max3421_driver) [L6034] tmp = spi_register_driver(& max3421_driver) [L6035] return (tmp); VAL [\result=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp=0] [L6264] RET, EXPR max3421_driver_init() [L6264] ldv_retval_0 = max3421_driver_init() [L6265] COND TRUE ldv_retval_0 == 0 [L6266] ldv_state_variable_0 = 3 [L6267] ldv_state_variable_2 = 1 [L6268] CALL ldv_initialize_spi_driver_2() [L6159] void *tmp ; VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] CALL, EXPR ldv_zalloc(1496UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=1496, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1496, tmp___0=2147483648] [L6161] RET, EXPR ldv_zalloc(1496UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_zalloc(1496UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] tmp = ldv_zalloc(1496UL) [L6162] max3421_driver_group0 = (struct spi_device *)tmp VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6268] RET ldv_initialize_spi_driver_2() [L6269] ldv_state_variable_3 = 1 [L6270] CALL ldv_initialize_hc_driver_3() [L6122] void *tmp ; [L6123] void *tmp___0 ; VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] CALL, EXPR ldv_zalloc(192UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=192, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=192, tmp___0=2147483648] [L6125] RET, EXPR ldv_zalloc(192UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(192UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] tmp = ldv_zalloc(192UL) [L6126] max3421_hcd_desc_group0 = (struct urb *)tmp VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] CALL, EXPR ldv_zalloc(968UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [\old(size)=968, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=968, tmp___0=2147483648] [L6127] RET, EXPR ldv_zalloc(968UL) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(968UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] tmp___0 = ldv_zalloc(968UL) [L6128] max3421_hcd_desc_group1 = (struct usb_hcd *)tmp___0 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}] [L6270] RET ldv_initialize_hc_driver_3() [L6273] COND FALSE !(ldv_retval_0 != 0) VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=1, tmp___8=1] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: [L6288] case 2: VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=2, tmp___8=1] [L6289] COND TRUE ldv_state_variable_3 != 0 [L6290] tmp___9 = __VERIFIER_nondet_int() [L6292] case 0: [L6303] case 1: [L6315] case 2: [L6327] case 3: [L6339] case 4: [L6351] case 5: [L6363] case 6: [L6375] case 7: [L6387] case 8: [L6395] case 9: [L6407] case 10: VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=2, tmp___8=1, tmp___9=10] [L6408] COND TRUE ldv_state_variable_3 == 1 VAL [__this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=13, ldvarg1=14, ldvarg2=15, ldvarg3=12, ldvarg4={0:0}, ldvarg5=16, ldvarg6=12, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=12, tmp___1=13, tmp___2={0:0}, tmp___3=14, tmp___4={0:0}, tmp___5=11, tmp___6=15, tmp___7=2, tmp___8=1, tmp___9=10] [L6409] CALL max3421_urb_enqueue(max3421_hcd_desc_group1, max3421_hcd_desc_group0, ldvarg5) VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5535] struct spi_device *spi ; [L5536] struct spi_device *tmp ; [L5537] struct max3421_hcd *max3421_hcd ; [L5538] struct max3421_hcd *tmp___0 ; [L5539] struct max3421_ep *max3421_ep ; [L5540] unsigned long flags ; [L5541] int retval ; [L5542] void *tmp___1 ; [L5544] EXPR hcd->self.controller VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hcd->self.controller={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, urb={0:0}, urb={0:0}] [L5544] CALL, EXPR to_spi_device(hcd->self.controller) VAL [\old(ldv_spin)=0, __this_module={0:0}, dev={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4062] struct device const *__mptr ; [L4063] struct spi_device *tmp ; VAL [\old(ldv_spin)=0, __this_module={0:0}, dev={0:-9223372036854775808}, dev={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4065] COND TRUE (unsigned long )dev != (unsigned long )((struct device *)0) [L4066] __mptr = (struct device const *)dev [L4067] tmp = (struct spi_device *)__mptr VAL [\old(ldv_spin)=0, __mptr={0:-9223372036854775808}, __this_module={0:0}, dev={0:-9223372036854775808}, dev={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:-9223372036854775808}] [L4071] return (tmp); VAL [\old(ldv_spin)=0, \result={0:-9223372036854775808}, __mptr={0:-9223372036854775808}, __this_module={0:0}, dev={0:-9223372036854775808}, dev={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:-9223372036854775808}] [L5544] RET, EXPR to_spi_device(hcd->self.controller) VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hcd->self.controller={0:-9223372036854775808}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, to_spi_device(hcd->self.controller)={0:-9223372036854775808}, urb={0:0}, urb={0:0}] [L5544] tmp = to_spi_device(hcd->self.controller) [L5545] spi = tmp VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, urb={0:0}, urb={0:0}] [L5546] CALL, EXPR hcd_to_max3421(hcd) VAL [\old(ldv_spin)=0, __this_module={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4223] return ((struct max3421_hcd *)(& hcd->hcd_priv)); VAL [\old(ldv_spin)=0, \result={0:899}, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5546] RET, EXPR hcd_to_max3421(hcd) VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hcd_to_max3421(hcd)={0:899}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, urb={0:0}, urb={0:0}] [L5546] tmp___0 = hcd_to_max3421(hcd) [L5547] max3421_hcd = tmp___0 [L5548] urb->pipe [L5549] case 1U: VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=-2147483648] [L5550] case 0U: VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=-2147483648] [L5557] default: VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=-2147483648] [L5561] CALL ldv_spin_lock() VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6582] ldv_spin = 1 VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5561] RET ldv_spin_lock() VAL [\old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={0:-9223372036854775808}, tmp={0:-9223372036854775808}, tmp___0={0:899}, urb={0:0}, urb={0:0}, urb->pipe=-2147483648] [L5562] EXPR urb->ep [L5562] EXPR (urb->ep)->hcpriv [L5562] max3421_ep = (struct max3421_ep *)(urb->ep)->hcpriv [L5563] COND TRUE (unsigned long )max3421_ep == (unsigned long )((struct max3421_ep *)0) [L5564] CALL kzalloc(40UL, mem_flags) [L6513] CALL ldv_check_alloc_flags(flags) VAL [\old(flags)=16, \old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6549] COND FALSE !(ldv_spin == 0 || ! (flags & 16U)) VAL [\old(flags)=16, \old(ldv_spin)=0, __this_module={0:0}, flags=16, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6551] CALL ldv_error() VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3987] reach_error() VAL [\old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, LDV_IN_INTERRUPT=1, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 35 procedures, 536 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.9s, OverallIterations: 6, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1983 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1941 mSDsluCounter, 11391 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6851 mSDsCounter, 129 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 194 IncrementalHoareTripleChecker+Invalid, 323 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 129 mSolverCounterUnsat, 4540 mSDtfsCounter, 194 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 412 GetRequests, 402 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1979occurred in iteration=5, InterpolantAutomatonStates: 18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 5 MinimizatonAttempts, 827 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.2s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 513 NumberOfCodeBlocks, 513 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 409 ConstructedInterpolants, 0 QuantifiedInterpolants, 523 SizeOfPredicates, 4 NumberOfNonLiveVariables, 3392 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 5 InterpolantComputations, 5 PerfectInterpolantSequences, 213/213 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-14 17:48:11,722 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample