./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-839c364b5d67a0f615c82cb70ab247790648d4a9-839c364 [2021-12-14 17:53:37,663 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-14 17:53:37,664 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-14 17:53:37,714 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-14 17:53:37,723 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-14 17:53:37,726 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-14 17:53:37,728 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-14 17:53:37,733 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-14 17:53:37,734 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-14 17:53:37,738 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-14 17:53:37,739 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-14 17:53:37,740 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-14 17:53:37,740 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-14 17:53:37,742 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-14 17:53:37,743 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-14 17:53:37,747 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-14 17:53:37,748 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-14 17:53:37,748 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-14 17:53:37,751 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-14 17:53:37,754 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-14 17:53:37,756 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-14 17:53:37,757 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-14 17:53:37,758 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-14 17:53:37,758 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-14 17:53:37,761 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-14 17:53:37,761 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-14 17:53:37,761 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-14 17:53:37,762 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-14 17:53:37,762 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-14 17:53:37,763 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-14 17:53:37,763 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-14 17:53:37,764 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-14 17:53:37,765 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-14 17:53:37,765 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-14 17:53:37,766 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-14 17:53:37,766 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-14 17:53:37,767 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-14 17:53:37,767 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-14 17:53:37,767 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-14 17:53:37,768 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-14 17:53:37,768 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-14 17:53:37,769 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-14 17:53:37,804 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-14 17:53:37,805 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-14 17:53:37,806 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-14 17:53:37,806 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-14 17:53:37,806 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-14 17:53:37,807 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-14 17:53:37,807 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-14 17:53:37,807 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-14 17:53:37,808 INFO L138 SettingsManager]: * Use SBE=true [2021-12-14 17:53:37,808 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-14 17:53:37,808 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-14 17:53:37,808 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-14 17:53:37,809 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-14 17:53:37,809 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-14 17:53:37,809 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-14 17:53:37,809 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-14 17:53:37,809 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-14 17:53:37,809 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-14 17:53:37,809 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-14 17:53:37,810 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-14 17:53:37,810 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-14 17:53:37,810 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-14 17:53:37,810 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-14 17:53:37,810 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-14 17:53:37,810 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-14 17:53:37,810 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-14 17:53:37,811 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-14 17:53:37,811 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-14 17:53:37,811 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-14 17:53:37,811 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-14 17:53:37,811 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-14 17:53:37,811 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2021-12-14 17:53:38,011 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-14 17:53:38,037 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-14 17:53:38,039 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-14 17:53:38,040 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-14 17:53:38,041 INFO L275 PluginConnector]: CDTParser initialized [2021-12-14 17:53:38,042 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-14 17:53:38,082 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/31913033e/be483f573d4d46fe99fc3ad582c285e4/FLAG6e9886b4f [2021-12-14 17:53:38,632 INFO L306 CDTParser]: Found 1 translation units. [2021-12-14 17:53:38,632 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-14 17:53:38,665 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/31913033e/be483f573d4d46fe99fc3ad582c285e4/FLAG6e9886b4f [2021-12-14 17:53:39,071 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/31913033e/be483f573d4d46fe99fc3ad582c285e4 [2021-12-14 17:53:39,074 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-14 17:53:39,076 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-14 17:53:39,078 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-14 17:53:39,078 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-14 17:53:39,081 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-14 17:53:39,082 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:53:39" (1/1) ... [2021-12-14 17:53:39,084 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6f9c3027 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:39, skipping insertion in model container [2021-12-14 17:53:39,084 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:53:39" (1/1) ... [2021-12-14 17:53:39,091 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-14 17:53:39,170 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-14 17:53:39,508 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-14 17:53:39,508 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-14 17:53:39,509 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-14 17:53:39,509 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-14 17:53:39,509 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-14 17:53:39,509 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-14 17:53:39,509 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-14 17:53:39,510 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-14 17:53:39,515 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-14 17:53:39,515 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-14 17:53:39,515 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-14 17:53:39,516 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-14 17:53:39,516 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-14 17:53:39,516 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-14 17:53:39,517 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-14 17:53:39,517 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-14 17:53:39,517 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-14 17:53:39,517 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-14 17:53:39,517 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-14 17:53:39,517 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-14 17:53:39,649 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-14 17:53:39,795 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:53:39,860 INFO L203 MainTranslator]: Completed pre-run [2021-12-14 17:53:39,929 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-14 17:53:39,930 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-14 17:53:39,931 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-14 17:53:39,932 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-14 17:53:39,932 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-14 17:53:39,933 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-14 17:53:39,933 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-14 17:53:39,934 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-14 17:53:39,939 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-14 17:53:39,940 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-14 17:53:39,940 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-14 17:53:39,941 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-14 17:53:39,941 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-14 17:53:39,942 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-14 17:53:39,942 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-14 17:53:39,943 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-14 17:53:39,943 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-14 17:53:39,943 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-14 17:53:39,943 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-14 17:53:39,944 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-14 17:53:39,983 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-14 17:53:40,031 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:53:40,109 INFO L208 MainTranslator]: Completed translation [2021-12-14 17:53:40,111 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40 WrapperNode [2021-12-14 17:53:40,111 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-14 17:53:40,112 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-14 17:53:40,112 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-14 17:53:40,113 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-14 17:53:40,119 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,175 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,241 INFO L137 Inliner]: procedures = 98, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1886 [2021-12-14 17:53:40,242 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-14 17:53:40,242 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-14 17:53:40,242 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-14 17:53:40,243 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-14 17:53:40,250 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,250 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,259 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,260 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,302 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,321 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,330 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,346 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-14 17:53:40,352 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-14 17:53:40,352 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-14 17:53:40,352 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-14 17:53:40,353 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (1/1) ... [2021-12-14 17:53:40,358 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-14 17:53:40,366 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-14 17:53:40,377 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-14 17:53:40,396 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-14 17:53:40,408 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2021-12-14 17:53:40,409 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2021-12-14 17:53:40,409 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-14 17:53:40,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-14 17:53:40,410 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-14 17:53:40,410 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2021-12-14 17:53:40,410 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2021-12-14 17:53:40,410 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-14 17:53:40,410 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-14 17:53:40,410 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-14 17:53:40,410 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-14 17:53:40,411 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-14 17:53:40,411 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-14 17:53:40,411 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2021-12-14 17:53:40,411 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2021-12-14 17:53:40,411 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-14 17:53:40,412 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-14 17:53:40,412 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2021-12-14 17:53:40,413 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2021-12-14 17:53:40,413 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-14 17:53:40,413 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-14 17:53:40,413 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2021-12-14 17:53:40,413 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2021-12-14 17:53:40,413 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-14 17:53:40,414 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-14 17:53:40,414 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-14 17:53:40,414 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-12-14 17:53:40,414 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-12-14 17:53:40,414 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2021-12-14 17:53:40,414 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-14 17:53:40,414 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-14 17:53:40,415 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-14 17:53:40,415 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-14 17:53:40,415 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2021-12-14 17:53:40,415 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2021-12-14 17:53:40,415 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2021-12-14 17:53:40,416 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2021-12-14 17:53:40,416 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-14 17:53:40,416 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-14 17:53:40,416 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2021-12-14 17:53:40,416 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2021-12-14 17:53:40,416 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2021-12-14 17:53:40,416 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2021-12-14 17:53:40,416 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2021-12-14 17:53:40,417 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2021-12-14 17:53:40,417 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2021-12-14 17:53:40,417 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2021-12-14 17:53:40,417 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-14 17:53:40,418 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2021-12-14 17:53:40,418 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2021-12-14 17:53:40,418 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-14 17:53:40,418 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-14 17:53:40,419 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2021-12-14 17:53:40,419 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2021-12-14 17:53:40,419 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-14 17:53:40,419 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-14 17:53:40,722 INFO L236 CfgBuilder]: Building ICFG [2021-12-14 17:53:40,723 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-14 17:53:40,845 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-14 17:53:40,885 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-12-14 17:53:41,766 INFO L277 CfgBuilder]: Performing block encoding [2021-12-14 17:53:41,779 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-14 17:53:41,780 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-14 17:53:41,782 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:53:41 BoogieIcfgContainer [2021-12-14 17:53:41,782 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-14 17:53:41,783 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-14 17:53:41,783 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-14 17:53:41,786 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-14 17:53:41,786 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 05:53:39" (1/3) ... [2021-12-14 17:53:41,787 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a256107 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:53:41, skipping insertion in model container [2021-12-14 17:53:41,787 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:40" (2/3) ... [2021-12-14 17:53:41,788 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a256107 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:53:41, skipping insertion in model container [2021-12-14 17:53:41,788 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:53:41" (3/3) ... [2021-12-14 17:53:41,789 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-14 17:53:41,793 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-14 17:53:41,793 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-14 17:53:41,852 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-14 17:53:41,860 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-14 17:53:41,861 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-14 17:53:41,896 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2021-12-14 17:53:41,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-14 17:53:41,908 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:53:41,909 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:53:41,909 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:53:41,913 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:53:41,914 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2021-12-14 17:53:41,925 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-14 17:53:41,926 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [562864362] [2021-12-14 17:53:41,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:53:41,931 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-14 17:53:42,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:42,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-14 17:53:42,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:42,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-14 17:53:42,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:42,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-14 17:53:42,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:42,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-14 17:53:42,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:42,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-14 17:53:42,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:42,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-14 17:53:42,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:42,477 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-14 17:53:42,477 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-14 17:53:42,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [562864362] [2021-12-14 17:53:42,478 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [562864362] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:53:42,479 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:53:42,479 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-14 17:53:42,480 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [783881927] [2021-12-14 17:53:42,481 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:53:42,484 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-14 17:53:42,484 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-14 17:53:42,508 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-14 17:53:42,508 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-14 17:53:42,511 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:53:43,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:53:43,131 INFO L93 Difference]: Finished difference Result 758 states and 1117 transitions. [2021-12-14 17:53:43,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-14 17:53:43,133 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2021-12-14 17:53:43,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:53:43,141 INFO L225 Difference]: With dead ends: 758 [2021-12-14 17:53:43,142 INFO L226 Difference]: Without dead ends: 351 [2021-12-14 17:53:43,145 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=129, Unknown=0, NotChecked=0, Total=182 [2021-12-14 17:53:43,147 INFO L933 BasicCegarLoop]: 474 mSDtfsCounter, 135 mSDsluCounter, 2203 mSDsCounter, 0 mSdLazyCounter, 392 mSolverCounterSat, 132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 2677 SdHoareTripleChecker+Invalid, 524 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 132 IncrementalHoareTripleChecker+Valid, 392 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-14 17:53:43,148 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [142 Valid, 2677 Invalid, 524 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [132 Valid, 392 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-14 17:53:43,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2021-12-14 17:53:43,201 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 342. [2021-12-14 17:53:43,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-14 17:53:43,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2021-12-14 17:53:43,213 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2021-12-14 17:53:43,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:53:43,215 INFO L470 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2021-12-14 17:53:43,215 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:53:43,215 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2021-12-14 17:53:43,218 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-14 17:53:43,223 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:53:43,223 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:53:43,223 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-14 17:53:43,224 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:53:43,224 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:53:43,224 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2021-12-14 17:53:43,224 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-14 17:53:43,224 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1717921144] [2021-12-14 17:53:43,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:53:43,225 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-14 17:53:43,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:43,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-14 17:53:43,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:43,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-14 17:53:43,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:43,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-14 17:53:43,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:43,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-14 17:53:43,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:43,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-14 17:53:43,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:43,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-14 17:53:43,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:43,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-14 17:53:43,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:43,500 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-14 17:53:43,501 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-14 17:53:43,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1717921144] [2021-12-14 17:53:43,501 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1717921144] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-14 17:53:43,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [415300337] [2021-12-14 17:53:43,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:53:43,502 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-14 17:53:43,502 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-14 17:53:43,531 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-14 17:53:43,559 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-14 17:53:43,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:43,940 INFO L263 TraceCheckSpWp]: Trace formula consists of 2305 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-14 17:53:43,947 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:53:44,152 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-14 17:53:44,153 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-14 17:53:44,153 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [415300337] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:53:44,153 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-14 17:53:44,153 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 8 [2021-12-14 17:53:44,154 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [920139312] [2021-12-14 17:53:44,154 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:53:44,154 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-14 17:53:44,154 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-14 17:53:44,155 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-14 17:53:44,155 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-14 17:53:44,155 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-14 17:53:44,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:53:44,208 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2021-12-14 17:53:44,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-14 17:53:44,209 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2021-12-14 17:53:44,209 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:53:44,212 INFO L225 Difference]: With dead ends: 657 [2021-12-14 17:53:44,212 INFO L226 Difference]: Without dead ends: 343 [2021-12-14 17:53:44,214 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-12-14 17:53:44,219 INFO L933 BasicCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-14 17:53:44,220 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-14 17:53:44,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2021-12-14 17:53:44,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2021-12-14 17:53:44,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-14 17:53:44,251 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2021-12-14 17:53:44,251 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2021-12-14 17:53:44,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:53:44,252 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2021-12-14 17:53:44,252 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-14 17:53:44,252 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2021-12-14 17:53:44,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-14 17:53:44,255 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:53:44,255 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:53:44,284 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-14 17:53:44,471 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-14 17:53:44,471 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:53:44,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:53:44,472 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2021-12-14 17:53:44,472 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-14 17:53:44,472 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1697970382] [2021-12-14 17:53:44,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:53:44,472 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-14 17:53:44,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:44,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-14 17:53:44,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:44,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-14 17:53:44,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:44,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-14 17:53:44,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:44,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-14 17:53:44,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:44,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-14 17:53:44,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:44,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-14 17:53:44,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:44,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-14 17:53:44,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:44,765 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-14 17:53:44,765 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-14 17:53:44,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1697970382] [2021-12-14 17:53:44,766 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1697970382] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-14 17:53:44,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2106424676] [2021-12-14 17:53:44,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:53:44,767 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-14 17:53:44,767 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-14 17:53:44,768 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-14 17:53:44,769 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-14 17:53:45,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:45,165 INFO L263 TraceCheckSpWp]: Trace formula consists of 2335 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-14 17:53:45,168 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:53:45,397 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 1 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-14 17:53:45,397 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-14 17:53:45,582 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 1 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-14 17:53:45,582 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2106424676] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-14 17:53:45,583 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-14 17:53:45,583 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 5, 5] total 13 [2021-12-14 17:53:45,583 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1645089951] [2021-12-14 17:53:45,583 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-14 17:53:45,584 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-14 17:53:45,584 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-14 17:53:45,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-14 17:53:45,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=116, Unknown=0, NotChecked=0, Total=156 [2021-12-14 17:53:45,585 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 13 states, 13 states have (on average 4.153846153846154) internal successors, (54), 10 states have internal predecessors, (54), 2 states have call successors, (14), 5 states have call predecessors, (14), 4 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-14 17:53:46,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:53:46,143 INFO L93 Difference]: Finished difference Result 669 states and 960 transitions. [2021-12-14 17:53:46,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-14 17:53:46,143 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 4.153846153846154) internal successors, (54), 10 states have internal predecessors, (54), 2 states have call successors, (14), 5 states have call predecessors, (14), 4 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 63 [2021-12-14 17:53:46,143 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:53:46,145 INFO L225 Difference]: With dead ends: 669 [2021-12-14 17:53:46,145 INFO L226 Difference]: Without dead ends: 352 [2021-12-14 17:53:46,146 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 131 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2021-12-14 17:53:46,147 INFO L933 BasicCegarLoop]: 461 mSDtfsCounter, 125 mSDsluCounter, 1452 mSDsCounter, 0 mSdLazyCounter, 268 mSolverCounterSat, 166 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 1913 SdHoareTripleChecker+Invalid, 434 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 166 IncrementalHoareTripleChecker+Valid, 268 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-14 17:53:46,148 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [126 Valid, 1913 Invalid, 434 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [166 Valid, 268 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-14 17:53:46,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2021-12-14 17:53:46,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 346. [2021-12-14 17:53:46,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-14 17:53:46,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2021-12-14 17:53:46,161 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2021-12-14 17:53:46,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:53:46,161 INFO L470 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2021-12-14 17:53:46,161 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 4.153846153846154) internal successors, (54), 10 states have internal predecessors, (54), 2 states have call successors, (14), 5 states have call predecessors, (14), 4 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-14 17:53:46,162 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2021-12-14 17:53:46,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-14 17:53:46,163 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:53:46,164 INFO L514 BasicCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:53:46,203 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-14 17:53:46,379 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable2 [2021-12-14 17:53:46,379 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:53:46,380 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:53:46,380 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2021-12-14 17:53:46,380 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-14 17:53:46,380 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [530028292] [2021-12-14 17:53:46,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:53:46,381 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-14 17:53:46,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-14 17:53:46,588 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-14 17:53:46,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-14 17:53:46,822 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-14 17:53:46,826 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-14 17:53:46,827 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-14 17:53:46,829 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-14 17:53:46,831 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2021-12-14 17:53:46,834 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-14 17:53:46,861 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-14 17:53:46,862 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-14 17:53:46,939 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 05:53:46 BoogieIcfgContainer [2021-12-14 17:53:46,939 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-14 17:53:46,940 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-14 17:53:46,940 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-14 17:53:46,940 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-14 17:53:46,940 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:53:41" (3/4) ... [2021-12-14 17:53:46,942 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-14 17:53:46,942 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-14 17:53:46,943 INFO L158 Benchmark]: Toolchain (without parser) took 7867.50ms. Allocated memory was 102.8MB in the beginning and 270.5MB in the end (delta: 167.8MB). Free memory was 65.0MB in the beginning and 191.1MB in the end (delta: -126.1MB). Peak memory consumption was 41.7MB. Max. memory is 16.1GB. [2021-12-14 17:53:46,943 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 75.5MB. Free memory is still 41.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-14 17:53:46,944 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1033.21ms. Allocated memory was 102.8MB in the beginning and 146.8MB in the end (delta: 44.0MB). Free memory was 65.0MB in the beginning and 102.9MB in the end (delta: -37.9MB). Peak memory consumption was 42.1MB. Max. memory is 16.1GB. [2021-12-14 17:53:46,944 INFO L158 Benchmark]: Boogie Procedure Inliner took 129.61ms. Allocated memory is still 146.8MB. Free memory was 102.9MB in the beginning and 90.3MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-12-14 17:53:46,944 INFO L158 Benchmark]: Boogie Preprocessor took 108.63ms. Allocated memory is still 146.8MB. Free memory was 90.3MB in the beginning and 79.1MB in the end (delta: 11.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-14 17:53:46,948 INFO L158 Benchmark]: RCFGBuilder took 1430.62ms. Allocated memory is still 146.8MB. Free memory was 79.1MB in the beginning and 50.0MB in the end (delta: 29.1MB). Peak memory consumption was 38.8MB. Max. memory is 16.1GB. [2021-12-14 17:53:46,948 INFO L158 Benchmark]: TraceAbstraction took 5155.66ms. Allocated memory was 146.8MB in the beginning and 270.5MB in the end (delta: 123.7MB). Free memory was 50.0MB in the beginning and 192.1MB in the end (delta: -142.2MB). Peak memory consumption was 116.7MB. Max. memory is 16.1GB. [2021-12-14 17:53:46,948 INFO L158 Benchmark]: Witness Printer took 3.10ms. Allocated memory is still 270.5MB. Free memory was 192.1MB in the beginning and 191.1MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-14 17:53:46,950 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 75.5MB. Free memory is still 41.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1033.21ms. Allocated memory was 102.8MB in the beginning and 146.8MB in the end (delta: 44.0MB). Free memory was 65.0MB in the beginning and 102.9MB in the end (delta: -37.9MB). Peak memory consumption was 42.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 129.61ms. Allocated memory is still 146.8MB. Free memory was 102.9MB in the beginning and 90.3MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 108.63ms. Allocated memory is still 146.8MB. Free memory was 90.3MB in the beginning and 79.1MB in the end (delta: 11.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 1430.62ms. Allocated memory is still 146.8MB. Free memory was 79.1MB in the beginning and 50.0MB in the end (delta: 29.1MB). Peak memory consumption was 38.8MB. Max. memory is 16.1GB. * TraceAbstraction took 5155.66ms. Allocated memory was 146.8MB in the beginning and 270.5MB in the end (delta: 123.7MB). Free memory was 50.0MB in the beginning and 192.1MB in the end (delta: -142.2MB). Peak memory consumption was 116.7MB. Max. memory is 16.1GB. * Witness Printer took 3.10ms. Allocated memory is still 270.5MB. Free memory was 192.1MB in the beginning and 191.1MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={42:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=1, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=0, ldvarg3={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=0, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=0, ldvarg3={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=0, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551615:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551615:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551615:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=0, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=0, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=0, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=0, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=0, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=1, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=0, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=0, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.0s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 1.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 270 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 262 mSDsluCounter, 5985 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4584 mSDsCounter, 299 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 668 IncrementalHoareTripleChecker+Invalid, 967 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 299 mSolverCounterUnsat, 1401 mSDtfsCounter, 668 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 254 GetRequests, 214 SyntacticMatches, 2 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 85 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 27, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 15 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.0s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 372 NumberOfCodeBlocks, 372 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 360 ConstructedInterpolants, 0 QuantifiedInterpolants, 744 SizeOfPredicates, 2 NumberOfNonLiveVariables, 4640 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 6 InterpolantComputations, 2 PerfectInterpolantSequences, 99/111 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-14 17:53:46,992 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-839c364b5d67a0f615c82cb70ab247790648d4a9-839c364 [2021-12-14 17:53:48,747 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-14 17:53:48,749 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-14 17:53:48,777 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-14 17:53:48,777 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-14 17:53:48,778 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-14 17:53:48,779 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-14 17:53:48,780 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-14 17:53:48,794 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-14 17:53:48,795 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-14 17:53:48,796 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-14 17:53:48,796 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-14 17:53:48,797 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-14 17:53:48,797 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-14 17:53:48,798 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-14 17:53:48,799 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-14 17:53:48,799 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-14 17:53:48,800 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-14 17:53:48,800 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-14 17:53:48,801 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-14 17:53:48,802 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-14 17:53:48,803 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-14 17:53:48,804 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-14 17:53:48,805 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-14 17:53:48,806 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-14 17:53:48,806 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-14 17:53:48,807 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-14 17:53:48,807 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-14 17:53:48,808 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-14 17:53:48,808 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-14 17:53:48,808 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-14 17:53:48,809 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-14 17:53:48,809 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-14 17:53:48,810 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-14 17:53:48,811 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-14 17:53:48,811 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-14 17:53:48,811 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-14 17:53:48,811 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-14 17:53:48,812 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-14 17:53:48,818 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-14 17:53:48,818 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-14 17:53:48,820 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-14 17:53:48,858 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-14 17:53:48,860 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-14 17:53:48,861 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-14 17:53:48,861 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-14 17:53:48,862 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-14 17:53:48,862 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-14 17:53:48,863 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-14 17:53:48,863 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-14 17:53:48,863 INFO L138 SettingsManager]: * Use SBE=true [2021-12-14 17:53:48,864 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-14 17:53:48,864 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-14 17:53:48,865 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-14 17:53:48,865 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-14 17:53:48,865 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-14 17:53:48,865 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-14 17:53:48,865 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-14 17:53:48,865 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-14 17:53:48,866 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-14 17:53:48,866 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-14 17:53:48,866 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-14 17:53:48,866 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-14 17:53:48,866 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-14 17:53:48,866 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-14 17:53:48,867 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-14 17:53:48,867 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-14 17:53:48,867 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-14 17:53:48,867 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-14 17:53:48,867 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-14 17:53:48,867 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-14 17:53:48,868 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-14 17:53:48,868 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-14 17:53:48,868 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-14 17:53:48,868 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-14 17:53:48,869 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-14 17:53:48,869 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2021-12-14 17:53:49,138 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-14 17:53:49,160 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-14 17:53:49,162 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-14 17:53:49,162 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-14 17:53:49,163 INFO L275 PluginConnector]: CDTParser initialized [2021-12-14 17:53:49,164 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-14 17:53:49,212 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1a3cf265d/50c70e7d214c4fcead6370893eaef447/FLAGcb1ac2eff [2021-12-14 17:53:49,781 INFO L306 CDTParser]: Found 1 translation units. [2021-12-14 17:53:49,782 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-14 17:53:49,821 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1a3cf265d/50c70e7d214c4fcead6370893eaef447/FLAGcb1ac2eff [2021-12-14 17:53:50,249 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1a3cf265d/50c70e7d214c4fcead6370893eaef447 [2021-12-14 17:53:50,256 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-14 17:53:50,257 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-14 17:53:50,268 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-14 17:53:50,268 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-14 17:53:50,271 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-14 17:53:50,271 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:53:50" (1/1) ... [2021-12-14 17:53:50,272 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@17d2bd32 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:50, skipping insertion in model container [2021-12-14 17:53:50,272 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:53:50" (1/1) ... [2021-12-14 17:53:50,277 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-14 17:53:50,357 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-14 17:53:50,703 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-14 17:53:50,704 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-14 17:53:50,704 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-14 17:53:50,705 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-14 17:53:50,706 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-14 17:53:50,723 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-14 17:53:50,723 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-14 17:53:50,724 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-14 17:53:50,730 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-14 17:53:50,731 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-14 17:53:50,731 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-14 17:53:50,735 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-14 17:53:50,735 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-14 17:53:50,736 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-14 17:53:50,737 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-14 17:53:50,737 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-14 17:53:50,738 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-14 17:53:50,738 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-14 17:53:50,738 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-14 17:53:50,738 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-14 17:53:50,890 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-14 17:53:51,045 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:53:51,094 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-14 17:53:51,113 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-14 17:53:51,180 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-14 17:53:51,180 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-14 17:53:51,181 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-14 17:53:51,181 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-14 17:53:51,182 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-14 17:53:51,182 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-14 17:53:51,182 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-14 17:53:51,183 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-14 17:53:51,186 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-14 17:53:51,187 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-14 17:53:51,187 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-14 17:53:51,188 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-14 17:53:51,188 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-14 17:53:51,188 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-14 17:53:51,189 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-14 17:53:51,189 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-14 17:53:51,189 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-14 17:53:51,189 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-14 17:53:51,189 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-14 17:53:51,190 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-14 17:53:51,227 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-14 17:53:51,280 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:53:51,299 INFO L203 MainTranslator]: Completed pre-run [2021-12-14 17:53:51,376 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-14 17:53:51,377 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-14 17:53:51,377 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-14 17:53:51,377 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-14 17:53:51,378 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-14 17:53:51,378 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-14 17:53:51,378 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-14 17:53:51,378 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-14 17:53:51,382 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-14 17:53:51,383 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-14 17:53:51,383 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-14 17:53:51,383 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-14 17:53:51,383 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-14 17:53:51,384 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-14 17:53:51,384 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-14 17:53:51,384 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-14 17:53:51,384 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-14 17:53:51,385 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-14 17:53:51,385 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-14 17:53:51,386 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-14 17:53:51,410 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-14 17:53:51,448 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-14 17:53:51,528 INFO L208 MainTranslator]: Completed translation [2021-12-14 17:53:51,528 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51 WrapperNode [2021-12-14 17:53:51,529 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-14 17:53:51,530 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-14 17:53:51,530 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-14 17:53:51,530 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-14 17:53:51,535 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,576 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,671 INFO L137 Inliner]: procedures = 107, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1826 [2021-12-14 17:53:51,672 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-14 17:53:51,673 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-14 17:53:51,673 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-14 17:53:51,673 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-14 17:53:51,679 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,680 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,703 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,703 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,745 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,765 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,771 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,779 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-14 17:53:51,780 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-14 17:53:51,780 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-14 17:53:51,780 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-14 17:53:51,780 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (1/1) ... [2021-12-14 17:53:51,786 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-14 17:53:51,794 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-14 17:53:51,804 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-14 17:53:51,807 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-14 17:53:51,832 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-14 17:53:51,832 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-14 17:53:51,833 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2021-12-14 17:53:51,833 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2021-12-14 17:53:51,833 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-14 17:53:51,833 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-14 17:53:51,833 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2021-12-14 17:53:51,833 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2021-12-14 17:53:51,833 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-14 17:53:51,833 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-14 17:53:51,834 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-14 17:53:51,834 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-14 17:53:51,834 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-14 17:53:51,834 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-14 17:53:51,834 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2021-12-14 17:53:51,834 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2021-12-14 17:53:51,834 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-14 17:53:51,834 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-14 17:53:51,834 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2021-12-14 17:53:51,835 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2021-12-14 17:53:51,835 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-14 17:53:51,835 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-14 17:53:51,835 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2021-12-14 17:53:51,835 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2021-12-14 17:53:51,835 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-14 17:53:51,835 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-14 17:53:51,835 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-14 17:53:51,835 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-12-14 17:53:51,836 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-12-14 17:53:51,836 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2021-12-14 17:53:51,836 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-14 17:53:51,836 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-14 17:53:51,836 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-14 17:53:51,836 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-14 17:53:51,836 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2021-12-14 17:53:51,836 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2021-12-14 17:53:51,836 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2021-12-14 17:53:51,837 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2021-12-14 17:53:51,837 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-14 17:53:51,837 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-14 17:53:51,837 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2021-12-14 17:53:51,837 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2021-12-14 17:53:51,837 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-14 17:53:51,837 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-14 17:53:51,837 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-14 17:53:51,837 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-14 17:53:51,838 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2021-12-14 17:53:51,838 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2021-12-14 17:53:51,838 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2021-12-14 17:53:51,838 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2021-12-14 17:53:51,838 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2021-12-14 17:53:51,838 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2021-12-14 17:53:51,838 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2021-12-14 17:53:51,838 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2021-12-14 17:53:51,838 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-14 17:53:51,839 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-14 17:53:51,839 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2021-12-14 17:53:51,839 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2021-12-14 17:53:51,839 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-14 17:53:51,839 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-14 17:53:52,158 INFO L236 CfgBuilder]: Building ICFG [2021-12-14 17:53:52,159 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-14 17:53:52,283 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-14 17:53:52,334 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-12-14 17:53:53,698 INFO L277 CfgBuilder]: Performing block encoding [2021-12-14 17:53:53,705 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-14 17:53:53,705 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-14 17:53:53,707 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:53:53 BoogieIcfgContainer [2021-12-14 17:53:53,707 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-14 17:53:53,708 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-14 17:53:53,708 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-14 17:53:53,710 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-14 17:53:53,710 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 05:53:50" (1/3) ... [2021-12-14 17:53:53,711 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a6761b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:53:53, skipping insertion in model container [2021-12-14 17:53:53,711 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:53:51" (2/3) ... [2021-12-14 17:53:53,711 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a6761b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:53:53, skipping insertion in model container [2021-12-14 17:53:53,711 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:53:53" (3/3) ... [2021-12-14 17:53:53,712 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-14 17:53:53,715 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-14 17:53:53,715 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-14 17:53:53,743 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-14 17:53:53,747 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-14 17:53:53,747 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-14 17:53:53,761 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2021-12-14 17:53:53,767 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-14 17:53:53,767 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:53:53,768 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:53:53,768 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:53:53,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:53:53,772 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2021-12-14 17:53:53,782 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:53:53,783 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [21952543] [2021-12-14 17:53:53,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:53:53,783 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:53:53,784 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:53:53,785 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:53:53,801 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-14 17:53:54,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:54,652 INFO L263 TraceCheckSpWp]: Trace formula consists of 1929 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-14 17:53:54,657 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:53:54,840 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-14 17:53:54,840 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-14 17:53:54,840 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-14 17:53:54,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [21952543] [2021-12-14 17:53:54,841 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [21952543] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:53:54,841 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:53:54,841 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-14 17:53:54,843 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [222187762] [2021-12-14 17:53:54,844 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:53:54,848 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-14 17:53:54,848 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-14 17:53:54,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-14 17:53:54,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-14 17:53:54,877 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:53:55,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:53:55,083 INFO L93 Difference]: Finished difference Result 751 states and 1103 transitions. [2021-12-14 17:53:55,085 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-14 17:53:55,086 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2021-12-14 17:53:55,086 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:53:55,094 INFO L225 Difference]: With dead ends: 751 [2021-12-14 17:53:55,099 INFO L226 Difference]: Without dead ends: 344 [2021-12-14 17:53:55,106 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-14 17:53:55,109 INFO L933 BasicCegarLoop]: 480 mSDtfsCounter, 34 mSDsluCounter, 1421 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 1901 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-14 17:53:55,112 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [35 Valid, 1901 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-14 17:53:55,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 344 states. [2021-12-14 17:53:55,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 344 to 342. [2021-12-14 17:53:55,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-14 17:53:55,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2021-12-14 17:53:55,182 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2021-12-14 17:53:55,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:53:55,183 INFO L470 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2021-12-14 17:53:55,183 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-14 17:53:55,183 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2021-12-14 17:53:55,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-14 17:53:55,190 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:53:55,190 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:53:55,230 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-14 17:53:55,391 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:53:55,391 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:53:55,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:53:55,392 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2021-12-14 17:53:55,395 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:53:55,395 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [120064080] [2021-12-14 17:53:55,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:53:55,395 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:53:55,395 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:53:55,396 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:53:55,416 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-14 17:53:56,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:56,191 INFO L263 TraceCheckSpWp]: Trace formula consists of 1946 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-14 17:53:56,193 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:53:56,313 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-14 17:53:56,314 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-14 17:53:56,314 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-14 17:53:56,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [120064080] [2021-12-14 17:53:56,315 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [120064080] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-14 17:53:56,315 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-14 17:53:56,315 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-14 17:53:56,315 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1330897821] [2021-12-14 17:53:56,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-14 17:53:56,317 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-14 17:53:56,317 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-14 17:53:56,317 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-14 17:53:56,317 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-14 17:53:56,318 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-14 17:53:56,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:53:56,376 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2021-12-14 17:53:56,377 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-14 17:53:56,377 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2021-12-14 17:53:56,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:53:56,382 INFO L225 Difference]: With dead ends: 657 [2021-12-14 17:53:56,382 INFO L226 Difference]: Without dead ends: 343 [2021-12-14 17:53:56,383 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-14 17:53:56,385 INFO L933 BasicCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-14 17:53:56,385 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-14 17:53:56,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2021-12-14 17:53:56,416 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2021-12-14 17:53:56,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-14 17:53:56,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2021-12-14 17:53:56,420 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2021-12-14 17:53:56,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:53:56,422 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2021-12-14 17:53:56,422 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-14 17:53:56,422 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2021-12-14 17:53:56,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-14 17:53:56,428 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:53:56,428 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:53:56,461 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-12-14 17:53:56,634 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:53:56,634 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:53:56,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:53:56,634 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2021-12-14 17:53:56,638 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:53:56,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1476872683] [2021-12-14 17:53:56,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-14 17:53:56,638 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:53:56,638 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:53:56,639 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:53:56,640 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-14 17:53:57,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-14 17:53:57,449 INFO L263 TraceCheckSpWp]: Trace formula consists of 1968 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-14 17:53:57,451 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-14 17:53:57,564 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-14 17:53:57,565 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-14 17:53:57,772 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-14 17:53:57,773 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-14 17:53:57,773 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1476872683] [2021-12-14 17:53:57,773 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1476872683] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-14 17:53:57,773 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-14 17:53:57,773 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2021-12-14 17:53:57,773 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [298768770] [2021-12-14 17:53:57,773 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-14 17:53:57,773 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-14 17:53:57,773 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-14 17:53:57,774 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-14 17:53:57,774 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-14 17:53:57,774 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-14 17:53:57,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-14 17:53:57,897 INFO L93 Difference]: Finished difference Result 663 states and 949 transitions. [2021-12-14 17:53:57,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-14 17:53:57,897 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 63 [2021-12-14 17:53:57,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-14 17:53:57,899 INFO L225 Difference]: With dead ends: 663 [2021-12-14 17:53:57,899 INFO L226 Difference]: Without dead ends: 346 [2021-12-14 17:53:57,900 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2021-12-14 17:53:57,901 INFO L933 BasicCegarLoop]: 466 mSDtfsCounter, 7 mSDsluCounter, 2784 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 3250 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-14 17:53:57,901 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7 Valid, 3250 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-14 17:53:57,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2021-12-14 17:53:57,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 346. [2021-12-14 17:53:57,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-14 17:53:57,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2021-12-14 17:53:57,910 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2021-12-14 17:53:57,910 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-14 17:53:57,910 INFO L470 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2021-12-14 17:53:57,911 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-14 17:53:57,911 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2021-12-14 17:53:57,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-14 17:53:57,912 INFO L506 BasicCegarLoop]: Found error trace [2021-12-14 17:53:57,912 INFO L514 BasicCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-14 17:53:57,948 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-12-14 17:53:58,129 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:53:58,129 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-14 17:53:58,130 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-14 17:53:58,130 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2021-12-14 17:53:58,132 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-14 17:53:58,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1680886389] [2021-12-14 17:53:58,132 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-14 17:53:58,132 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-14 17:53:58,132 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-14 17:53:58,133 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-14 17:53:58,135 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-14 17:54:04,128 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-12-14 17:54:04,128 INFO L229 tOrderPrioritization]: Conjunction of SSA is sat [2021-12-14 17:54:04,128 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-14 17:54:10,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-14 17:54:11,148 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-14 17:54:11,148 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-14 17:54:11,149 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-14 17:54:11,222 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-12-14 17:54:11,371 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-14 17:54:11,374 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2021-12-14 17:54:11,376 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-14 17:54:11,408 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-14 17:54:11,411 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-14 17:54:11,503 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 05:54:11 BoogieIcfgContainer [2021-12-14 17:54:11,503 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-14 17:54:11,504 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-14 17:54:11,504 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-14 17:54:11,504 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-14 17:54:11,504 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:53:53" (3/4) ... [2021-12-14 17:54:11,506 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-14 17:54:11,507 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-14 17:54:11,507 INFO L158 Benchmark]: Toolchain (without parser) took 21250.27ms. Allocated memory was 56.6MB in the beginning and 270.5MB in the end (delta: 213.9MB). Free memory was 28.0MB in the beginning and 205.1MB in the end (delta: -177.1MB). Peak memory consumption was 37.5MB. Max. memory is 16.1GB. [2021-12-14 17:54:11,507 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 56.6MB. Free memory was 38.9MB in the beginning and 38.8MB in the end (delta: 50.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-14 17:54:11,508 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1261.30ms. Allocated memory was 56.6MB in the beginning and 100.7MB in the end (delta: 44.0MB). Free memory was 27.9MB in the beginning and 45.3MB in the end (delta: -17.4MB). Peak memory consumption was 41.8MB. Max. memory is 16.1GB. [2021-12-14 17:54:11,508 INFO L158 Benchmark]: Boogie Procedure Inliner took 142.78ms. Allocated memory is still 100.7MB. Free memory was 45.3MB in the beginning and 49.5MB in the end (delta: -4.2MB). Peak memory consumption was 19.0MB. Max. memory is 16.1GB. [2021-12-14 17:54:11,508 INFO L158 Benchmark]: Boogie Preprocessor took 105.85ms. Allocated memory is still 100.7MB. Free memory was 49.5MB in the beginning and 38.2MB in the end (delta: 11.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-14 17:54:11,508 INFO L158 Benchmark]: RCFGBuilder took 1927.45ms. Allocated memory was 100.7MB in the beginning and 224.4MB in the end (delta: 123.7MB). Free memory was 37.7MB in the beginning and 166.4MB in the end (delta: -128.6MB). Peak memory consumption was 92.1MB. Max. memory is 16.1GB. [2021-12-14 17:54:11,508 INFO L158 Benchmark]: TraceAbstraction took 17795.20ms. Allocated memory was 224.4MB in the beginning and 270.5MB in the end (delta: 46.1MB). Free memory was 165.3MB in the beginning and 205.1MB in the end (delta: -39.8MB). Peak memory consumption was 114.4MB. Max. memory is 16.1GB. [2021-12-14 17:54:11,509 INFO L158 Benchmark]: Witness Printer took 2.75ms. Allocated memory is still 270.5MB. Free memory is still 205.1MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-14 17:54:11,510 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 56.6MB. Free memory was 38.9MB in the beginning and 38.8MB in the end (delta: 50.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1261.30ms. Allocated memory was 56.6MB in the beginning and 100.7MB in the end (delta: 44.0MB). Free memory was 27.9MB in the beginning and 45.3MB in the end (delta: -17.4MB). Peak memory consumption was 41.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 142.78ms. Allocated memory is still 100.7MB. Free memory was 45.3MB in the beginning and 49.5MB in the end (delta: -4.2MB). Peak memory consumption was 19.0MB. Max. memory is 16.1GB. * Boogie Preprocessor took 105.85ms. Allocated memory is still 100.7MB. Free memory was 49.5MB in the beginning and 38.2MB in the end (delta: 11.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 1927.45ms. Allocated memory was 100.7MB in the beginning and 224.4MB in the end (delta: 123.7MB). Free memory was 37.7MB in the beginning and 166.4MB in the end (delta: -128.6MB). Peak memory consumption was 92.1MB. Max. memory is 16.1GB. * TraceAbstraction took 17795.20ms. Allocated memory was 224.4MB in the beginning and 270.5MB in the end (delta: 46.1MB). Free memory was 165.3MB in the beginning and 205.1MB in the end (delta: -39.8MB). Peak memory consumption was 114.4MB. Max. memory is 16.1GB. * Witness Printer took 2.75ms. Allocated memory is still 270.5MB. Free memory is still 205.1MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={49:0}, ldvarg4={76:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={49:0}, ldvarg4={76:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg4={76:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=2147483648, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg4={76:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={76:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={76:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={47:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={47:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={47:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={47:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={47:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={47:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={47:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={76:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={49:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={76:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={76:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={76:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={76:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={76:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=2147483648, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={49:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={76:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:17179869184}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={47:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.6s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 0.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 44 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 43 mSDsluCounter, 6546 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5134 mSDsCounter, 8 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 46 IncrementalHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 8 mSolverCounterUnsat, 1412 mSDtfsCounter, 46 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 243 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 2 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 7.7s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 248 NumberOfCodeBlocks, 248 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 238 ConstructedInterpolants, 0 QuantifiedInterpolants, 302 SizeOfPredicates, 4 NumberOfNonLiveVariables, 5843 ConjunctsInSsa, 14 ConjunctsInUnsatCore, 4 InterpolantComputations, 2 PerfectInterpolantSequences, 66/74 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-14 17:54:11,542 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample