./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 04:07:49,120 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 04:07:49,122 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 04:07:49,158 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 04:07:49,158 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 04:07:49,161 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 04:07:49,163 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 04:07:49,165 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 04:07:49,166 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 04:07:49,171 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 04:07:49,171 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 04:07:49,172 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 04:07:49,173 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 04:07:49,175 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 04:07:49,176 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 04:07:49,179 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 04:07:49,180 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 04:07:49,181 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 04:07:49,183 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 04:07:49,187 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 04:07:49,189 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 04:07:49,190 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 04:07:49,191 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 04:07:49,191 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 04:07:49,193 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 04:07:49,193 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 04:07:49,194 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 04:07:49,195 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 04:07:49,195 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 04:07:49,195 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 04:07:49,196 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 04:07:49,196 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 04:07:49,197 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 04:07:49,198 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 04:07:49,199 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 04:07:49,199 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 04:07:49,200 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 04:07:49,200 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 04:07:49,200 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 04:07:49,200 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 04:07:49,201 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 04:07:49,202 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-16 04:07:49,228 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 04:07:49,228 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 04:07:49,228 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 04:07:49,229 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 04:07:49,229 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 04:07:49,230 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 04:07:49,230 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 04:07:49,230 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 04:07:49,230 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 04:07:49,230 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 04:07:49,231 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 04:07:49,231 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 04:07:49,231 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 04:07:49,232 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 04:07:49,232 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 04:07:49,232 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 04:07:49,232 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 04:07:49,232 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 04:07:49,232 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 04:07:49,232 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 04:07:49,233 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 04:07:49,233 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 04:07:49,233 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 04:07:49,233 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 04:07:49,233 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 04:07:49,233 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 04:07:49,234 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 04:07:49,234 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 04:07:49,234 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 04:07:49,234 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 04:07:49,234 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 04:07:49,234 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2021-12-16 04:07:49,420 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 04:07:49,442 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 04:07:49,444 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 04:07:49,445 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 04:07:49,445 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 04:07:49,446 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-16 04:07:49,515 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1b4301478/9c17ecefd342424f99a5ebab8365f8f3/FLAG4f47f7419 [2021-12-16 04:07:50,086 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 04:07:50,087 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-16 04:07:50,117 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1b4301478/9c17ecefd342424f99a5ebab8365f8f3/FLAG4f47f7419 [2021-12-16 04:07:50,536 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1b4301478/9c17ecefd342424f99a5ebab8365f8f3 [2021-12-16 04:07:50,538 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 04:07:50,539 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 04:07:50,550 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 04:07:50,551 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 04:07:50,553 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 04:07:50,553 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 04:07:50" (1/1) ... [2021-12-16 04:07:50,554 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6553e7ad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:50, skipping insertion in model container [2021-12-16 04:07:50,554 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 04:07:50" (1/1) ... [2021-12-16 04:07:50,559 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 04:07:50,619 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 04:07:50,925 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-16 04:07:50,926 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-16 04:07:50,926 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-16 04:07:50,927 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-16 04:07:50,928 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-16 04:07:50,929 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-16 04:07:50,930 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-16 04:07:50,930 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-16 04:07:50,938 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-16 04:07:50,939 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-16 04:07:50,940 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-16 04:07:50,943 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-16 04:07:50,944 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-16 04:07:50,944 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-16 04:07:50,945 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-16 04:07:50,945 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-16 04:07:50,945 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-16 04:07:50,946 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-16 04:07:50,946 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-16 04:07:50,946 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-16 04:07:51,117 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-16 04:07:51,318 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 04:07:51,372 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 04:07:51,442 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-16 04:07:51,443 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-16 04:07:51,443 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-16 04:07:51,444 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-16 04:07:51,444 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-16 04:07:51,445 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-16 04:07:51,445 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-16 04:07:51,445 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-16 04:07:51,450 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-16 04:07:51,450 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-16 04:07:51,450 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-16 04:07:51,451 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-16 04:07:51,452 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-16 04:07:51,452 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-16 04:07:51,453 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-16 04:07:51,453 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-16 04:07:51,453 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-16 04:07:51,453 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-16 04:07:51,453 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-16 04:07:51,453 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-16 04:07:51,480 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-16 04:07:51,532 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 04:07:51,601 INFO L208 MainTranslator]: Completed translation [2021-12-16 04:07:51,602 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51 WrapperNode [2021-12-16 04:07:51,602 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 04:07:51,603 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 04:07:51,603 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 04:07:51,603 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 04:07:51,608 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,645 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,717 INFO L137 Inliner]: procedures = 98, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1886 [2021-12-16 04:07:51,717 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 04:07:51,718 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 04:07:51,718 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 04:07:51,718 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 04:07:51,724 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,724 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,736 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,739 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,785 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,799 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,811 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,827 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 04:07:51,828 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 04:07:51,829 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 04:07:51,829 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 04:07:51,830 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (1/1) ... [2021-12-16 04:07:51,835 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 04:07:51,842 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 04:07:51,853 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 04:07:51,872 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 04:07:51,888 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2021-12-16 04:07:51,889 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2021-12-16 04:07:51,889 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-16 04:07:51,889 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-16 04:07:51,889 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-16 04:07:51,889 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2021-12-16 04:07:51,889 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2021-12-16 04:07:51,890 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-16 04:07:51,890 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-16 04:07:51,890 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-16 04:07:51,890 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-16 04:07:51,890 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-16 04:07:51,890 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-16 04:07:51,890 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2021-12-16 04:07:51,891 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2021-12-16 04:07:51,891 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-16 04:07:51,891 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-16 04:07:51,892 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2021-12-16 04:07:51,892 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2021-12-16 04:07:51,892 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-16 04:07:51,893 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-16 04:07:51,893 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2021-12-16 04:07:51,893 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2021-12-16 04:07:51,893 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-16 04:07:51,893 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-16 04:07:51,893 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-16 04:07:51,893 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-12-16 04:07:51,893 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-12-16 04:07:51,893 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2021-12-16 04:07:51,894 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 04:07:51,895 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-16 04:07:51,895 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-16 04:07:51,895 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-16 04:07:51,895 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2021-12-16 04:07:51,895 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2021-12-16 04:07:51,896 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2021-12-16 04:07:51,951 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2021-12-16 04:07:51,951 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-16 04:07:51,952 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-16 04:07:51,952 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2021-12-16 04:07:51,952 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2021-12-16 04:07:51,952 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2021-12-16 04:07:51,952 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2021-12-16 04:07:51,952 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2021-12-16 04:07:51,952 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2021-12-16 04:07:51,952 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2021-12-16 04:07:51,953 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2021-12-16 04:07:51,953 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 04:07:51,953 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2021-12-16 04:07:51,953 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2021-12-16 04:07:51,954 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-16 04:07:51,954 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-16 04:07:51,954 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2021-12-16 04:07:51,954 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2021-12-16 04:07:51,954 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 04:07:51,955 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 04:07:52,214 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 04:07:52,217 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 04:07:52,324 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-16 04:07:52,380 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-12-16 04:07:53,054 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 04:07:53,061 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 04:07:53,061 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-16 04:07:53,063 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 04:07:53 BoogieIcfgContainer [2021-12-16 04:07:53,063 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 04:07:53,064 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 04:07:53,064 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 04:07:53,067 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 04:07:53,067 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 04:07:50" (1/3) ... [2021-12-16 04:07:53,068 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33344022 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 04:07:53, skipping insertion in model container [2021-12-16 04:07:53,068 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:07:51" (2/3) ... [2021-12-16 04:07:53,068 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33344022 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 04:07:53, skipping insertion in model container [2021-12-16 04:07:53,068 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 04:07:53" (3/3) ... [2021-12-16 04:07:53,069 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-16 04:07:53,073 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 04:07:53,073 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 04:07:53,110 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 04:07:53,116 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 04:07:53,116 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 04:07:53,148 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2021-12-16 04:07:53,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-16 04:07:53,160 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 04:07:53,161 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 04:07:53,162 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 04:07:53,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 04:07:53,166 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2021-12-16 04:07:53,172 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 04:07:53,172 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1720328032] [2021-12-16 04:07:53,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 04:07:53,177 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 04:07:53,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:53,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 04:07:53,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:53,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 04:07:53,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:53,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 04:07:53,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:53,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 04:07:53,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:53,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 04:07:53,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:53,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-16 04:07:53,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:53,769 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-16 04:07:53,769 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 04:07:53,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1720328032] [2021-12-16 04:07:53,770 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1720328032] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 04:07:53,770 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 04:07:53,771 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-16 04:07:53,772 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1856198613] [2021-12-16 04:07:53,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 04:07:53,776 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 04:07:53,776 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 04:07:53,797 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 04:07:53,798 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-16 04:07:53,801 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 04:07:54,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 04:07:54,416 INFO L93 Difference]: Finished difference Result 758 states and 1117 transitions. [2021-12-16 04:07:54,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-16 04:07:54,418 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2021-12-16 04:07:54,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 04:07:54,426 INFO L225 Difference]: With dead ends: 758 [2021-12-16 04:07:54,426 INFO L226 Difference]: Without dead ends: 351 [2021-12-16 04:07:54,430 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=129, Unknown=0, NotChecked=0, Total=182 [2021-12-16 04:07:54,432 INFO L933 BasicCegarLoop]: 474 mSDtfsCounter, 135 mSDsluCounter, 2203 mSDsCounter, 0 mSdLazyCounter, 392 mSolverCounterSat, 132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 2677 SdHoareTripleChecker+Invalid, 524 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 132 IncrementalHoareTripleChecker+Valid, 392 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-16 04:07:54,433 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [142 Valid, 2677 Invalid, 524 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [132 Valid, 392 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-16 04:07:54,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2021-12-16 04:07:54,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 342. [2021-12-16 04:07:54,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-16 04:07:54,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2021-12-16 04:07:54,479 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2021-12-16 04:07:54,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 04:07:54,479 INFO L470 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2021-12-16 04:07:54,479 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 04:07:54,480 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2021-12-16 04:07:54,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-16 04:07:54,482 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 04:07:54,482 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 04:07:54,482 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 04:07:54,482 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 04:07:54,482 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 04:07:54,483 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2021-12-16 04:07:54,483 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 04:07:54,483 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1583394633] [2021-12-16 04:07:54,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 04:07:54,483 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 04:07:54,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:54,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 04:07:54,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:54,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 04:07:54,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:54,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 04:07:54,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:54,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 04:07:54,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:54,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 04:07:54,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:54,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-16 04:07:54,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:54,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-16 04:07:54,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:54,684 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-16 04:07:54,685 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 04:07:54,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1583394633] [2021-12-16 04:07:54,685 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1583394633] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 04:07:54,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [644190576] [2021-12-16 04:07:54,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 04:07:54,686 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 04:07:54,686 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 04:07:54,687 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 04:07:54,688 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 04:07:55,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:55,091 INFO L263 TraceCheckSpWp]: Trace formula consists of 2305 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-16 04:07:55,096 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 04:07:55,227 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-16 04:07:55,228 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 04:07:55,228 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [644190576] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 04:07:55,228 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 04:07:55,228 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 8 [2021-12-16 04:07:55,229 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [692895883] [2021-12-16 04:07:55,229 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 04:07:55,229 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-16 04:07:55,230 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 04:07:55,230 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 04:07:55,230 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-16 04:07:55,230 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-16 04:07:55,266 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 04:07:55,266 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2021-12-16 04:07:55,266 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-16 04:07:55,267 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2021-12-16 04:07:55,267 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 04:07:55,270 INFO L225 Difference]: With dead ends: 657 [2021-12-16 04:07:55,270 INFO L226 Difference]: Without dead ends: 343 [2021-12-16 04:07:55,271 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-12-16 04:07:55,274 INFO L933 BasicCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 04:07:55,275 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 04:07:55,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2021-12-16 04:07:55,298 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2021-12-16 04:07:55,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-16 04:07:55,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2021-12-16 04:07:55,301 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2021-12-16 04:07:55,301 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 04:07:55,301 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2021-12-16 04:07:55,301 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-16 04:07:55,301 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2021-12-16 04:07:55,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-16 04:07:55,303 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 04:07:55,303 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 04:07:55,330 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 04:07:55,519 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 04:07:55,520 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 04:07:55,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 04:07:55,520 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2021-12-16 04:07:55,520 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 04:07:55,520 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1617269445] [2021-12-16 04:07:55,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 04:07:55,521 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 04:07:55,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:55,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 04:07:55,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:55,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 04:07:55,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:55,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 04:07:55,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:55,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 04:07:55,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:55,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 04:07:55,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:55,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-16 04:07:55,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:55,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-16 04:07:55,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:55,728 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-16 04:07:55,728 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 04:07:55,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1617269445] [2021-12-16 04:07:55,728 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1617269445] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 04:07:55,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1772053408] [2021-12-16 04:07:55,728 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 04:07:55,729 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 04:07:55,729 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 04:07:55,730 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 04:07:55,731 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 04:07:56,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:07:56,082 INFO L263 TraceCheckSpWp]: Trace formula consists of 2335 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-16 04:07:56,085 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 04:07:56,205 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-16 04:07:56,206 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 04:07:56,386 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-16 04:07:56,386 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1772053408] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 04:07:56,386 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 04:07:56,386 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 5, 5] total 13 [2021-12-16 04:07:56,387 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427832924] [2021-12-16 04:07:56,387 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 04:07:56,387 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-16 04:07:56,387 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 04:07:56,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-16 04:07:56,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=118, Unknown=0, NotChecked=0, Total=156 [2021-12-16 04:07:56,388 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-16 04:07:56,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 04:07:56,886 INFO L93 Difference]: Finished difference Result 669 states and 960 transitions. [2021-12-16 04:07:56,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-16 04:07:56,887 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 63 [2021-12-16 04:07:56,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 04:07:56,888 INFO L225 Difference]: With dead ends: 669 [2021-12-16 04:07:56,888 INFO L226 Difference]: Without dead ends: 352 [2021-12-16 04:07:56,889 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 131 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=95, Invalid=285, Unknown=0, NotChecked=0, Total=380 [2021-12-16 04:07:56,890 INFO L933 BasicCegarLoop]: 463 mSDtfsCounter, 124 mSDsluCounter, 2726 mSDsCounter, 0 mSdLazyCounter, 396 mSolverCounterSat, 166 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 3189 SdHoareTripleChecker+Invalid, 562 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 166 IncrementalHoareTripleChecker+Valid, 396 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-16 04:07:56,890 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [125 Valid, 3189 Invalid, 562 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [166 Valid, 396 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-16 04:07:56,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2021-12-16 04:07:56,900 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 346. [2021-12-16 04:07:56,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-16 04:07:56,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2021-12-16 04:07:56,903 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2021-12-16 04:07:56,903 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 04:07:56,903 INFO L470 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2021-12-16 04:07:56,903 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-16 04:07:56,904 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2021-12-16 04:07:56,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-16 04:07:56,905 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 04:07:56,905 INFO L514 BasicCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 04:07:56,928 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-16 04:07:57,123 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable2 [2021-12-16 04:07:57,124 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 04:07:57,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 04:07:57,124 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2021-12-16 04:07:57,125 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 04:07:57,125 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [149098284] [2021-12-16 04:07:57,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 04:07:57,125 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 04:07:57,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-16 04:07:57,287 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-16 04:07:57,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-16 04:07:57,451 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-16 04:07:57,452 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-16 04:07:57,452 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 04:07:57,454 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 04:07:57,456 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2021-12-16 04:07:57,458 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 04:07:57,482 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-16 04:07:57,483 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-16 04:07:57,555 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 04:07:57 BoogieIcfgContainer [2021-12-16 04:07:57,557 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 04:07:57,557 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 04:07:57,557 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 04:07:57,558 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 04:07:57,558 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 04:07:53" (3/4) ... [2021-12-16 04:07:57,561 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-16 04:07:57,561 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 04:07:57,561 INFO L158 Benchmark]: Toolchain (without parser) took 7022.38ms. Allocated memory was 88.1MB in the beginning and 310.4MB in the end (delta: 222.3MB). Free memory was 45.8MB in the beginning and 152.1MB in the end (delta: -106.3MB). Peak memory consumption was 116.0MB. Max. memory is 16.1GB. [2021-12-16 04:07:57,561 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 88.1MB. Free memory was 61.1MB in the beginning and 61.1MB in the end (delta: 21.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 04:07:57,562 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1051.83ms. Allocated memory is still 117.4MB. Free memory was 93.5MB in the beginning and 72.0MB in the end (delta: 21.5MB). Peak memory consumption was 54.6MB. Max. memory is 16.1GB. [2021-12-16 04:07:57,562 INFO L158 Benchmark]: Boogie Procedure Inliner took 114.77ms. Allocated memory is still 117.4MB. Free memory was 72.0MB in the beginning and 59.5MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-12-16 04:07:57,562 INFO L158 Benchmark]: Boogie Preprocessor took 109.70ms. Allocated memory is still 117.4MB. Free memory was 59.5MB in the beginning and 48.3MB in the end (delta: 11.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-16 04:07:57,566 INFO L158 Benchmark]: RCFGBuilder took 1234.65ms. Allocated memory was 117.4MB in the beginning and 184.5MB in the end (delta: 67.1MB). Free memory was 48.3MB in the beginning and 92.0MB in the end (delta: -43.7MB). Peak memory consumption was 43.3MB. Max. memory is 16.1GB. [2021-12-16 04:07:57,566 INFO L158 Benchmark]: TraceAbstraction took 4492.60ms. Allocated memory was 184.5MB in the beginning and 310.4MB in the end (delta: 125.8MB). Free memory was 90.9MB in the beginning and 152.1MB in the end (delta: -61.2MB). Peak memory consumption was 64.6MB. Max. memory is 16.1GB. [2021-12-16 04:07:57,566 INFO L158 Benchmark]: Witness Printer took 3.63ms. Allocated memory is still 310.4MB. Free memory is still 152.1MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 04:07:57,568 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 88.1MB. Free memory was 61.1MB in the beginning and 61.1MB in the end (delta: 21.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1051.83ms. Allocated memory is still 117.4MB. Free memory was 93.5MB in the beginning and 72.0MB in the end (delta: 21.5MB). Peak memory consumption was 54.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 114.77ms. Allocated memory is still 117.4MB. Free memory was 72.0MB in the beginning and 59.5MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 109.70ms. Allocated memory is still 117.4MB. Free memory was 59.5MB in the beginning and 48.3MB in the end (delta: 11.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 1234.65ms. Allocated memory was 117.4MB in the beginning and 184.5MB in the end (delta: 67.1MB). Free memory was 48.3MB in the beginning and 92.0MB in the end (delta: -43.7MB). Peak memory consumption was 43.3MB. Max. memory is 16.1GB. * TraceAbstraction took 4492.60ms. Allocated memory was 184.5MB in the beginning and 310.4MB in the end (delta: 125.8MB). Free memory was 90.9MB in the beginning and 152.1MB in the end (delta: -61.2MB). Peak memory consumption was 64.6MB. Max. memory is 16.1GB. * Witness Printer took 3.63ms. Allocated memory is still 310.4MB. Free memory is still 152.1MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={43:0}, ldvarg4={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={43:0}, ldvarg4={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg4={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=1, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg4={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551617:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551617:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551617:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={42:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={42:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={42:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={42:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={42:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=1, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={43:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={42:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.3s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 1.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 269 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 261 mSDsluCounter, 7261 SdHoareTripleChecker+Invalid, 0.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5858 mSDsCounter, 299 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 796 IncrementalHoareTripleChecker+Invalid, 1095 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 299 mSolverCounterUnsat, 1403 mSDtfsCounter, 796 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 253 GetRequests, 214 SyntacticMatches, 2 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 26, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 15 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.9s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 372 NumberOfCodeBlocks, 372 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 360 ConstructedInterpolants, 0 QuantifiedInterpolants, 716 SizeOfPredicates, 2 NumberOfNonLiveVariables, 4640 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 6 InterpolantComputations, 2 PerfectInterpolantSequences, 93/111 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-16 04:07:57,609 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 04:07:59,276 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 04:07:59,278 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 04:07:59,312 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 04:07:59,313 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 04:07:59,315 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 04:07:59,317 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 04:07:59,319 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 04:07:59,321 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 04:07:59,321 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 04:07:59,322 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 04:07:59,322 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 04:07:59,323 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 04:07:59,323 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 04:07:59,324 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 04:07:59,325 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 04:07:59,325 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 04:07:59,326 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 04:07:59,327 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 04:07:59,328 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 04:07:59,329 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 04:07:59,334 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 04:07:59,335 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 04:07:59,337 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 04:07:59,347 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 04:07:59,350 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 04:07:59,350 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 04:07:59,351 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 04:07:59,352 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 04:07:59,352 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 04:07:59,353 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 04:07:59,353 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 04:07:59,354 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 04:07:59,355 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 04:07:59,356 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 04:07:59,356 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 04:07:59,357 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 04:07:59,357 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 04:07:59,357 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 04:07:59,358 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 04:07:59,358 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 04:07:59,362 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-16 04:07:59,391 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 04:07:59,391 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 04:07:59,392 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 04:07:59,392 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 04:07:59,393 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 04:07:59,393 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 04:07:59,394 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 04:07:59,394 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 04:07:59,395 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 04:07:59,395 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 04:07:59,396 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 04:07:59,396 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 04:07:59,396 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 04:07:59,396 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 04:07:59,396 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-16 04:07:59,397 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-16 04:07:59,397 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-16 04:07:59,397 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 04:07:59,397 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 04:07:59,397 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 04:07:59,398 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 04:07:59,398 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 04:07:59,398 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 04:07:59,398 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 04:07:59,398 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 04:07:59,398 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 04:07:59,399 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 04:07:59,399 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-16 04:07:59,399 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-16 04:07:59,399 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 04:07:59,400 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 04:07:59,400 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 04:07:59,400 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 04:07:59,400 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-16 04:07:59,400 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2021-12-16 04:07:59,690 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 04:07:59,714 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 04:07:59,716 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 04:07:59,718 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 04:07:59,718 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 04:07:59,720 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-16 04:07:59,772 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ac3f4712e/0c95cf18ac1e48f880e2447b433032b7/FLAG4181b2f06 [2021-12-16 04:08:00,390 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 04:08:00,391 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-16 04:08:00,418 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ac3f4712e/0c95cf18ac1e48f880e2447b433032b7/FLAG4181b2f06 [2021-12-16 04:08:00,791 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ac3f4712e/0c95cf18ac1e48f880e2447b433032b7 [2021-12-16 04:08:00,793 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 04:08:00,794 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 04:08:00,795 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 04:08:00,795 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 04:08:00,798 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 04:08:00,798 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 04:08:00" (1/1) ... [2021-12-16 04:08:00,799 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@42b5a0a1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:00, skipping insertion in model container [2021-12-16 04:08:00,799 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 04:08:00" (1/1) ... [2021-12-16 04:08:00,803 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 04:08:00,880 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 04:08:01,186 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-16 04:08:01,188 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-16 04:08:01,188 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-16 04:08:01,189 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-16 04:08:01,191 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-16 04:08:01,194 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-16 04:08:01,195 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-16 04:08:01,195 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-16 04:08:01,205 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-16 04:08:01,205 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-16 04:08:01,206 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-16 04:08:01,207 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-16 04:08:01,207 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-16 04:08:01,208 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-16 04:08:01,209 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-16 04:08:01,209 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-16 04:08:01,209 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-16 04:08:01,210 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-16 04:08:01,210 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-16 04:08:01,210 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-16 04:08:01,366 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-16 04:08:01,529 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 04:08:01,559 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-16 04:08:01,583 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 04:08:01,640 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-16 04:08:01,641 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-16 04:08:01,641 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-16 04:08:01,642 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-16 04:08:01,642 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-16 04:08:01,643 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-16 04:08:01,643 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-16 04:08:01,644 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-16 04:08:01,647 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-16 04:08:01,648 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-16 04:08:01,648 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-16 04:08:01,648 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-16 04:08:01,648 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-16 04:08:01,649 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-16 04:08:01,650 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-16 04:08:01,650 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-16 04:08:01,650 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-16 04:08:01,650 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-16 04:08:01,650 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-16 04:08:01,650 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-16 04:08:01,671 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-16 04:08:01,726 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 04:08:01,745 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 04:08:01,841 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-16 04:08:01,842 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-16 04:08:01,842 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-16 04:08:01,842 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-16 04:08:01,842 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-16 04:08:01,843 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-16 04:08:01,843 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-16 04:08:01,843 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-16 04:08:01,847 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-16 04:08:01,848 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-16 04:08:01,848 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-16 04:08:01,848 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-16 04:08:01,849 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-16 04:08:01,849 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-16 04:08:01,849 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-16 04:08:01,850 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-16 04:08:01,850 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-16 04:08:01,850 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-16 04:08:01,850 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-16 04:08:01,851 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-16 04:08:01,877 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-16 04:08:01,923 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 04:08:01,987 INFO L208 MainTranslator]: Completed translation [2021-12-16 04:08:01,988 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01 WrapperNode [2021-12-16 04:08:01,988 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 04:08:01,989 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 04:08:01,989 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 04:08:01,990 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 04:08:01,994 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,040 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,141 INFO L137 Inliner]: procedures = 107, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1826 [2021-12-16 04:08:02,141 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 04:08:02,142 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 04:08:02,142 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 04:08:02,143 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 04:08:02,149 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,149 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,168 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,168 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,208 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,232 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,239 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,252 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 04:08:02,253 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 04:08:02,253 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 04:08:02,253 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 04:08:02,254 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (1/1) ... [2021-12-16 04:08:02,259 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 04:08:02,273 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 04:08:02,292 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 04:08:02,298 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 04:08:02,321 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-16 04:08:02,321 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-16 04:08:02,321 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2021-12-16 04:08:02,321 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2021-12-16 04:08:02,321 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-16 04:08:02,322 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-16 04:08:02,322 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2021-12-16 04:08:02,322 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2021-12-16 04:08:02,322 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-16 04:08:02,323 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-16 04:08:02,323 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-16 04:08:02,323 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-16 04:08:02,323 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-16 04:08:02,323 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-16 04:08:02,323 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2021-12-16 04:08:02,323 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2021-12-16 04:08:02,323 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-16 04:08:02,324 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-16 04:08:02,324 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2021-12-16 04:08:02,324 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2021-12-16 04:08:02,324 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-16 04:08:02,324 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-16 04:08:02,324 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2021-12-16 04:08:02,325 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2021-12-16 04:08:02,325 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-16 04:08:02,325 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-16 04:08:02,325 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-16 04:08:02,325 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-12-16 04:08:02,326 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-12-16 04:08:02,326 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2021-12-16 04:08:02,326 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 04:08:02,327 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-16 04:08:02,327 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-16 04:08:02,327 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-16 04:08:02,328 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2021-12-16 04:08:02,328 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2021-12-16 04:08:02,328 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2021-12-16 04:08:02,328 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2021-12-16 04:08:02,328 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-16 04:08:02,328 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-16 04:08:02,328 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2021-12-16 04:08:02,329 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2021-12-16 04:08:02,329 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-16 04:08:02,329 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-16 04:08:02,329 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-16 04:08:02,330 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-16 04:08:02,330 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2021-12-16 04:08:02,330 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2021-12-16 04:08:02,330 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2021-12-16 04:08:02,330 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2021-12-16 04:08:02,331 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2021-12-16 04:08:02,331 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2021-12-16 04:08:02,333 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2021-12-16 04:08:02,333 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2021-12-16 04:08:02,334 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-16 04:08:02,336 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-16 04:08:02,337 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2021-12-16 04:08:02,337 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2021-12-16 04:08:02,337 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 04:08:02,337 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 04:08:02,604 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 04:08:02,606 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 04:08:02,826 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-16 04:08:02,896 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-12-16 04:08:03,963 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 04:08:03,970 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 04:08:03,970 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-16 04:08:03,972 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 04:08:03 BoogieIcfgContainer [2021-12-16 04:08:03,972 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 04:08:03,973 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 04:08:03,973 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 04:08:03,975 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 04:08:03,975 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 04:08:00" (1/3) ... [2021-12-16 04:08:03,976 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2322ddfc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 04:08:03, skipping insertion in model container [2021-12-16 04:08:03,976 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 04:08:01" (2/3) ... [2021-12-16 04:08:03,976 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2322ddfc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 04:08:03, skipping insertion in model container [2021-12-16 04:08:03,976 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 04:08:03" (3/3) ... [2021-12-16 04:08:03,977 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-16 04:08:03,981 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 04:08:03,981 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 04:08:04,014 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 04:08:04,018 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 04:08:04,018 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 04:08:04,033 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2021-12-16 04:08:04,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-16 04:08:04,045 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 04:08:04,046 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 04:08:04,046 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 04:08:04,049 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 04:08:04,050 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2021-12-16 04:08:04,062 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-16 04:08:04,063 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [946991703] [2021-12-16 04:08:04,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 04:08:04,063 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-16 04:08:04,064 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-16 04:08:04,065 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-16 04:08:04,076 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-16 04:08:04,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:08:04,953 INFO L263 TraceCheckSpWp]: Trace formula consists of 1929 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-16 04:08:04,959 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 04:08:05,170 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-16 04:08:05,170 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 04:08:05,171 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-16 04:08:05,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [946991703] [2021-12-16 04:08:05,171 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [946991703] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 04:08:05,171 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 04:08:05,172 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 04:08:05,173 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1981313210] [2021-12-16 04:08:05,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 04:08:05,176 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 04:08:05,176 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-16 04:08:05,193 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 04:08:05,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 04:08:05,196 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 04:08:05,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 04:08:05,467 INFO L93 Difference]: Finished difference Result 751 states and 1103 transitions. [2021-12-16 04:08:05,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-16 04:08:05,469 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2021-12-16 04:08:05,470 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 04:08:05,478 INFO L225 Difference]: With dead ends: 751 [2021-12-16 04:08:05,478 INFO L226 Difference]: Without dead ends: 344 [2021-12-16 04:08:05,482 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-16 04:08:05,485 INFO L933 BasicCegarLoop]: 480 mSDtfsCounter, 34 mSDsluCounter, 1421 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 1901 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 04:08:05,485 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [35 Valid, 1901 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 04:08:05,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 344 states. [2021-12-16 04:08:05,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 344 to 342. [2021-12-16 04:08:05,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-16 04:08:05,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2021-12-16 04:08:05,548 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2021-12-16 04:08:05,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 04:08:05,548 INFO L470 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2021-12-16 04:08:05,549 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 04:08:05,549 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2021-12-16 04:08:05,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-16 04:08:05,553 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 04:08:05,553 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 04:08:05,586 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-16 04:08:05,763 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-16 04:08:05,764 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 04:08:05,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 04:08:05,764 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2021-12-16 04:08:05,766 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-16 04:08:05,766 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1503889402] [2021-12-16 04:08:05,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 04:08:05,767 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-16 04:08:05,767 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-16 04:08:05,768 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-16 04:08:05,768 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-16 04:08:06,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:08:06,644 INFO L263 TraceCheckSpWp]: Trace formula consists of 1946 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-16 04:08:06,647 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 04:08:06,735 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-16 04:08:06,736 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 04:08:06,736 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-16 04:08:06,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1503889402] [2021-12-16 04:08:06,736 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1503889402] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 04:08:06,737 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 04:08:06,737 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 04:08:06,737 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1932687447] [2021-12-16 04:08:06,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 04:08:06,738 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-16 04:08:06,738 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-16 04:08:06,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 04:08:06,739 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 04:08:06,739 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-16 04:08:06,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 04:08:06,798 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2021-12-16 04:08:06,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-16 04:08:06,799 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2021-12-16 04:08:06,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 04:08:06,801 INFO L225 Difference]: With dead ends: 657 [2021-12-16 04:08:06,801 INFO L226 Difference]: Without dead ends: 343 [2021-12-16 04:08:06,802 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-16 04:08:06,803 INFO L933 BasicCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 04:08:06,803 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 04:08:06,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2021-12-16 04:08:06,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2021-12-16 04:08:06,814 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-16 04:08:06,816 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2021-12-16 04:08:06,816 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2021-12-16 04:08:06,816 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 04:08:06,817 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2021-12-16 04:08:06,817 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-16 04:08:06,817 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2021-12-16 04:08:06,818 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-16 04:08:06,818 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 04:08:06,818 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 04:08:06,864 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-12-16 04:08:07,035 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-16 04:08:07,036 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 04:08:07,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 04:08:07,036 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2021-12-16 04:08:07,038 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-16 04:08:07,038 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [236069219] [2021-12-16 04:08:07,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 04:08:07,038 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-16 04:08:07,038 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-16 04:08:07,040 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-16 04:08:07,041 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-16 04:08:07,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 04:08:07,870 INFO L263 TraceCheckSpWp]: Trace formula consists of 1968 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-16 04:08:07,872 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 04:08:07,999 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-16 04:08:07,999 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 04:08:08,193 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-16 04:08:08,194 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-16 04:08:08,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [236069219] [2021-12-16 04:08:08,194 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [236069219] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 04:08:08,194 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-16 04:08:08,194 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2021-12-16 04:08:08,194 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [479909983] [2021-12-16 04:08:08,194 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-16 04:08:08,195 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 04:08:08,195 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-16 04:08:08,195 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 04:08:08,195 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-16 04:08:08,195 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-16 04:08:08,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 04:08:08,299 INFO L93 Difference]: Finished difference Result 663 states and 949 transitions. [2021-12-16 04:08:08,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 04:08:08,299 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 63 [2021-12-16 04:08:08,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 04:08:08,301 INFO L225 Difference]: With dead ends: 663 [2021-12-16 04:08:08,301 INFO L226 Difference]: Without dead ends: 346 [2021-12-16 04:08:08,302 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2021-12-16 04:08:08,303 INFO L933 BasicCegarLoop]: 466 mSDtfsCounter, 7 mSDsluCounter, 2784 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 3250 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 04:08:08,303 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7 Valid, 3250 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 04:08:08,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2021-12-16 04:08:08,312 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 346. [2021-12-16 04:08:08,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-16 04:08:08,314 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2021-12-16 04:08:08,315 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2021-12-16 04:08:08,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 04:08:08,315 INFO L470 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2021-12-16 04:08:08,315 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-16 04:08:08,315 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2021-12-16 04:08:08,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-16 04:08:08,316 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 04:08:08,316 INFO L514 BasicCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 04:08:08,346 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Ended with exit code 0 [2021-12-16 04:08:08,533 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-16 04:08:08,534 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 04:08:08,534 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 04:08:08,534 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2021-12-16 04:08:08,536 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-16 04:08:08,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2063041430] [2021-12-16 04:08:08,536 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-16 04:08:08,536 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-16 04:08:08,537 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-16 04:08:08,537 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-16 04:08:08,539 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-16 04:08:16,590 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-12-16 04:08:16,590 INFO L229 tOrderPrioritization]: Conjunction of SSA is sat [2021-12-16 04:08:16,591 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-16 04:08:23,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-16 04:08:23,876 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-16 04:08:23,877 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-16 04:08:23,877 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 04:08:23,937 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-12-16 04:08:24,095 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-16 04:08:24,098 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2021-12-16 04:08:24,100 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 04:08:24,126 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-16 04:08:24,128 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-16 04:08:24,237 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 04:08:24 BoogieIcfgContainer [2021-12-16 04:08:24,238 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 04:08:24,239 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 04:08:24,239 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 04:08:24,240 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 04:08:24,240 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 04:08:03" (3/4) ... [2021-12-16 04:08:24,244 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-16 04:08:24,245 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 04:08:24,245 INFO L158 Benchmark]: Toolchain (without parser) took 23451.00ms. Allocated memory was 67.1MB in the beginning and 320.9MB in the end (delta: 253.8MB). Free memory was 40.7MB in the beginning and 215.5MB in the end (delta: -174.7MB). Peak memory consumption was 78.4MB. Max. memory is 16.1GB. [2021-12-16 04:08:24,245 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 67.1MB. Free memory was 49.5MB in the beginning and 49.4MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 04:08:24,246 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1193.40ms. Allocated memory was 67.1MB in the beginning and 134.2MB in the end (delta: 67.1MB). Free memory was 40.6MB in the beginning and 65.3MB in the end (delta: -24.7MB). Peak memory consumption was 42.7MB. Max. memory is 16.1GB. [2021-12-16 04:08:24,246 INFO L158 Benchmark]: Boogie Procedure Inliner took 152.24ms. Allocated memory is still 134.2MB. Free memory was 65.3MB in the beginning and 79.9MB in the end (delta: -14.6MB). Peak memory consumption was 13.3MB. Max. memory is 16.1GB. [2021-12-16 04:08:24,246 INFO L158 Benchmark]: Boogie Preprocessor took 110.07ms. Allocated memory is still 134.2MB. Free memory was 79.9MB in the beginning and 68.1MB in the end (delta: 11.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-16 04:08:24,247 INFO L158 Benchmark]: RCFGBuilder took 1719.00ms. Allocated memory was 134.2MB in the beginning and 266.3MB in the end (delta: 132.1MB). Free memory was 68.1MB in the beginning and 129.9MB in the end (delta: -61.9MB). Peak memory consumption was 75.0MB. Max. memory is 16.1GB. [2021-12-16 04:08:24,247 INFO L158 Benchmark]: TraceAbstraction took 20265.56ms. Allocated memory was 266.3MB in the beginning and 320.9MB in the end (delta: 54.5MB). Free memory was 128.9MB in the beginning and 216.5MB in the end (delta: -87.6MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 04:08:24,247 INFO L158 Benchmark]: Witness Printer took 5.56ms. Allocated memory is still 320.9MB. Free memory was 216.5MB in the beginning and 215.5MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 04:08:24,249 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 67.1MB. Free memory was 49.5MB in the beginning and 49.4MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1193.40ms. Allocated memory was 67.1MB in the beginning and 134.2MB in the end (delta: 67.1MB). Free memory was 40.6MB in the beginning and 65.3MB in the end (delta: -24.7MB). Peak memory consumption was 42.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 152.24ms. Allocated memory is still 134.2MB. Free memory was 65.3MB in the beginning and 79.9MB in the end (delta: -14.6MB). Peak memory consumption was 13.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 110.07ms. Allocated memory is still 134.2MB. Free memory was 79.9MB in the beginning and 68.1MB in the end (delta: 11.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 1719.00ms. Allocated memory was 134.2MB in the beginning and 266.3MB in the end (delta: 132.1MB). Free memory was 68.1MB in the beginning and 129.9MB in the end (delta: -61.9MB). Peak memory consumption was 75.0MB. Max. memory is 16.1GB. * TraceAbstraction took 20265.56ms. Allocated memory was 266.3MB in the beginning and 320.9MB in the end (delta: 54.5MB). Free memory was 128.9MB in the beginning and 216.5MB in the end (delta: -87.6MB). There was no memory consumed. Max. memory is 16.1GB. * Witness Printer took 5.56ms. Allocated memory is still 320.9MB. Free memory was 216.5MB in the beginning and 215.5MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={221:0}, ldvarg4={111:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={221:0}, ldvarg4={111:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg4={111:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=2147483648, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg4={111:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={111:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={111:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={58:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={58:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={58:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={58:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={58:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={58:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={58:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={111:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={221:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={111:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={111:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={111:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={111:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={111:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=2147483648, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={221:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={111:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={58:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 20.1s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 0.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 44 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 43 mSDsluCounter, 6546 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5134 mSDsCounter, 8 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 46 IncrementalHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 8 mSolverCounterUnsat, 1412 mSDtfsCounter, 46 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 243 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 2 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 9.8s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 248 NumberOfCodeBlocks, 248 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 238 ConstructedInterpolants, 0 QuantifiedInterpolants, 302 SizeOfPredicates, 4 NumberOfNonLiveVariables, 5843 ConjunctsInSsa, 14 ConjunctsInUnsatCore, 4 InterpolantComputations, 2 PerfectInterpolantSequences, 66/74 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-16 04:08:24,297 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample