./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-18 05:17:18,643 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-18 05:17:18,645 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-18 05:17:18,725 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-18 05:17:18,726 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-18 05:17:18,729 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-18 05:17:18,730 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-18 05:17:18,735 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-18 05:17:18,740 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-18 05:17:18,741 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-18 05:17:18,742 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-18 05:17:18,743 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-18 05:17:18,743 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-18 05:17:18,747 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-18 05:17:18,748 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-18 05:17:18,750 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-18 05:17:18,752 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-18 05:17:18,754 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-18 05:17:18,755 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-18 05:17:18,757 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-18 05:17:18,760 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-18 05:17:18,761 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-18 05:17:18,763 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-18 05:17:18,763 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-18 05:17:18,768 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-18 05:17:18,768 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-18 05:17:18,768 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-18 05:17:18,769 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-18 05:17:18,769 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-18 05:17:18,770 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-18 05:17:18,770 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-18 05:17:18,770 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-18 05:17:18,771 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-18 05:17:18,772 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-18 05:17:18,773 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-18 05:17:18,774 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-18 05:17:18,774 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-18 05:17:18,774 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-18 05:17:18,775 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-18 05:17:18,775 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-18 05:17:18,777 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-18 05:17:18,778 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-18 05:17:18,811 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-18 05:17:18,811 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-18 05:17:18,812 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-18 05:17:18,812 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-18 05:17:18,813 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-18 05:17:18,813 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-18 05:17:18,813 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-18 05:17:18,813 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-18 05:17:18,814 INFO L138 SettingsManager]: * Use SBE=true [2021-12-18 05:17:18,814 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-18 05:17:18,815 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-18 05:17:18,815 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-18 05:17:18,815 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-18 05:17:18,815 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-18 05:17:18,816 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-18 05:17:18,816 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-18 05:17:18,816 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-18 05:17:18,816 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-18 05:17:18,816 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-18 05:17:18,816 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-18 05:17:18,817 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-18 05:17:18,817 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 05:17:18,817 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-18 05:17:18,817 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-18 05:17:18,817 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-18 05:17:18,818 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-18 05:17:18,818 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-18 05:17:18,819 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-18 05:17:18,819 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-18 05:17:18,819 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-18 05:17:18,820 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-18 05:17:18,820 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 [2021-12-18 05:17:19,038 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-18 05:17:19,061 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-18 05:17:19,064 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-18 05:17:19,065 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-18 05:17:19,065 INFO L275 PluginConnector]: CDTParser initialized [2021-12-18 05:17:19,066 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-18 05:17:19,121 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8053c7d96/ccf67da11660452397076e8c0fdbe87b/FLAG7894987bf [2021-12-18 05:17:19,797 INFO L306 CDTParser]: Found 1 translation units. [2021-12-18 05:17:19,798 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-18 05:17:19,843 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8053c7d96/ccf67da11660452397076e8c0fdbe87b/FLAG7894987bf [2021-12-18 05:17:19,941 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8053c7d96/ccf67da11660452397076e8c0fdbe87b [2021-12-18 05:17:19,943 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-18 05:17:19,946 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-18 05:17:19,948 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-18 05:17:19,949 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-18 05:17:19,952 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-18 05:17:19,952 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 05:17:19" (1/1) ... [2021-12-18 05:17:19,953 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5c163ff2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:19, skipping insertion in model container [2021-12-18 05:17:19,954 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 05:17:19" (1/1) ... [2021-12-18 05:17:19,959 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-18 05:17:20,060 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-18 05:17:21,546 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-18 05:17:21,584 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 05:17:21,605 INFO L203 MainTranslator]: Completed pre-run [2021-12-18 05:17:21,887 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-18 05:17:21,895 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 05:17:21,974 INFO L208 MainTranslator]: Completed translation [2021-12-18 05:17:21,976 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21 WrapperNode [2021-12-18 05:17:21,977 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-18 05:17:21,978 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-18 05:17:21,978 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-18 05:17:21,979 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-18 05:17:21,985 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,090 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,230 INFO L137 Inliner]: procedures = 261, calls = 1811, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4510 [2021-12-18 05:17:22,231 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-18 05:17:22,231 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-18 05:17:22,232 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-18 05:17:22,232 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-18 05:17:22,239 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,239 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,264 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,264 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,376 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,402 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,427 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,488 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-18 05:17:22,489 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-18 05:17:22,489 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-18 05:17:22,489 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-18 05:17:22,500 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (1/1) ... [2021-12-18 05:17:22,507 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 05:17:22,517 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 05:17:22,532 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-18 05:17:22,556 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-18 05:17:22,577 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-12-18 05:17:22,578 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-12-18 05:17:22,578 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_12 [2021-12-18 05:17:22,578 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_12 [2021-12-18 05:17:22,578 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-18 05:17:22,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-18 05:17:22,578 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-18 05:17:22,578 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-18 05:17:22,579 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-18 05:17:22,579 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-18 05:17:22,579 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-12-18 05:17:22,579 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-12-18 05:17:22,579 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-12-18 05:17:22,579 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-12-18 05:17:22,579 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-12-18 05:17:22,580 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-12-18 05:17:22,580 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-18 05:17:22,580 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-18 05:17:22,580 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-12-18 05:17:22,580 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-12-18 05:17:22,580 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-18 05:17:22,580 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-18 05:17:22,581 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-18 05:17:22,581 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-18 05:17:22,581 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-12-18 05:17:22,581 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-12-18 05:17:22,581 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-12-18 05:17:22,581 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-12-18 05:17:22,581 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_50 [2021-12-18 05:17:22,582 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_50 [2021-12-18 05:17:22,582 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-12-18 05:17:22,582 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-12-18 05:17:22,582 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-18 05:17:22,582 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-18 05:17:22,582 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-18 05:17:22,582 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-18 05:17:22,583 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-18 05:17:22,583 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-18 05:17:22,583 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-12-18 05:17:22,583 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-12-18 05:17:22,583 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-12-18 05:17:22,583 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-12-18 05:17:22,583 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-12-18 05:17:22,583 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-12-18 05:17:22,584 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-12-18 05:17:22,584 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-12-18 05:17:22,584 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-12-18 05:17:22,584 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-12-18 05:17:22,585 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_29 [2021-12-18 05:17:22,585 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_29 [2021-12-18 05:17:22,585 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-12-18 05:17:22,585 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-12-18 05:17:22,585 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-18 05:17:22,585 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_27 [2021-12-18 05:17:22,586 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_27 [2021-12-18 05:17:22,586 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-18 05:17:22,586 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-18 05:17:22,587 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-12-18 05:17:22,587 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-12-18 05:17:22,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-18 05:17:22,588 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_13 [2021-12-18 05:17:22,588 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_13 [2021-12-18 05:17:22,588 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-12-18 05:17:22,588 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-12-18 05:17:22,588 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-12-18 05:17:22,589 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-12-18 05:17:22,589 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-12-18 05:17:22,589 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-12-18 05:17:22,589 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-12-18 05:17:22,589 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-12-18 05:17:22,589 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_15 [2021-12-18 05:17:22,590 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_15 [2021-12-18 05:17:22,590 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-18 05:17:22,590 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-18 05:17:22,590 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-12-18 05:17:22,590 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-12-18 05:17:22,590 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-18 05:17:22,591 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-18 05:17:22,591 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-12-18 05:17:22,591 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-12-18 05:17:22,591 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-12-18 05:17:22,591 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-12-18 05:17:22,591 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-12-18 05:17:22,591 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-12-18 05:17:22,592 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-12-18 05:17:22,592 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-12-18 05:17:22,592 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-12-18 05:17:22,592 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-12-18 05:17:22,592 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-12-18 05:17:22,592 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-12-18 05:17:22,593 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-12-18 05:17:22,593 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-12-18 05:17:22,593 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-12-18 05:17:22,593 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-12-18 05:17:22,593 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-12-18 05:17:22,594 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-12-18 05:17:22,594 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-12-18 05:17:22,594 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-12-18 05:17:22,594 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-12-18 05:17:22,595 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-12-18 05:17:22,595 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_4 [2021-12-18 05:17:22,595 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_4 [2021-12-18 05:17:22,595 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-12-18 05:17:22,595 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-12-18 05:17:22,596 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-12-18 05:17:22,596 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-12-18 05:17:22,596 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-18 05:17:22,596 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-18 05:17:22,596 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-18 05:17:22,596 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-18 05:17:22,597 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-18 05:17:22,597 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-18 05:17:22,597 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-18 05:17:22,597 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-12-18 05:17:22,597 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-12-18 05:17:22,597 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-18 05:17:22,598 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-18 05:17:22,598 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-18 05:17:22,599 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-18 05:17:22,600 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-12-18 05:17:22,601 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-12-18 05:17:22,601 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-12-18 05:17:22,601 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-12-18 05:17:22,602 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-12-18 05:17:22,603 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-12-18 05:17:22,603 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-12-18 05:17:22,603 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-12-18 05:17:22,603 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-12-18 05:17:22,609 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-18 05:17:22,609 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-18 05:17:22,609 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_32 [2021-12-18 05:17:22,609 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_32 [2021-12-18 05:17:22,609 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-12-18 05:17:22,609 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-12-18 05:17:22,609 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-18 05:17:22,610 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-12-18 05:17:22,610 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-12-18 05:17:22,610 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_4 [2021-12-18 05:17:22,610 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_4 [2021-12-18 05:17:22,610 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-12-18 05:17:22,610 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-12-18 05:17:22,610 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-12-18 05:17:22,610 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-12-18 05:17:22,610 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-12-18 05:17:22,611 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-12-18 05:17:22,611 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-18 05:17:22,611 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-12-18 05:17:22,611 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-12-18 05:17:22,611 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_9 [2021-12-18 05:17:22,611 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_9 [2021-12-18 05:17:22,611 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-18 05:17:22,611 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-18 05:17:22,612 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-18 05:17:22,612 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-12-18 05:17:22,612 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-12-18 05:17:22,612 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-18 05:17:22,612 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-18 05:17:22,612 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_4 [2021-12-18 05:17:22,612 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_4 [2021-12-18 05:17:22,612 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-12-18 05:17:22,613 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-12-18 05:17:22,613 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-12-18 05:17:22,613 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-12-18 05:17:22,613 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-12-18 05:17:22,613 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-12-18 05:17:22,613 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-12-18 05:17:22,613 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-12-18 05:17:22,613 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-12-18 05:17:22,613 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-12-18 05:17:22,614 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-12-18 05:17:22,614 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-12-18 05:17:22,614 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-12-18 05:17:22,614 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-12-18 05:17:22,614 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-12-18 05:17:22,614 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-12-18 05:17:22,614 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-12-18 05:17:22,614 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-12-18 05:17:22,615 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-12-18 05:17:22,615 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-12-18 05:17:22,615 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-12-18 05:17:22,615 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-12-18 05:17:22,615 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-12-18 05:17:22,615 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-12-18 05:17:22,615 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-12-18 05:17:22,615 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-12-18 05:17:22,615 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2021-12-18 05:17:22,616 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2021-12-18 05:17:22,616 INFO L130 BoogieDeclarations]: Found specification of procedure delayed_work_timer_fn [2021-12-18 05:17:22,616 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_47 [2021-12-18 05:17:22,616 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_47 [2021-12-18 05:17:22,616 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-18 05:17:22,616 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-18 05:17:22,616 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-18 05:17:22,617 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-12-18 05:17:22,617 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-12-18 05:17:22,617 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-12-18 05:17:22,617 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-12-18 05:17:22,617 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-18 05:17:22,617 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-18 05:17:22,617 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-12-18 05:17:22,617 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-12-18 05:17:22,618 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-12-18 05:17:22,618 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-12-18 05:17:22,618 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-12-18 05:17:22,618 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-18 05:17:22,618 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-18 05:17:23,250 INFO L236 CfgBuilder]: Building ICFG [2021-12-18 05:17:23,253 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-18 05:17:24,368 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-18 05:17:27,481 INFO L277 CfgBuilder]: Performing block encoding [2021-12-18 05:17:27,501 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-18 05:17:27,503 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-18 05:17:27,507 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 05:17:27 BoogieIcfgContainer [2021-12-18 05:17:27,508 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-18 05:17:27,509 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-18 05:17:27,509 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-18 05:17:27,512 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-18 05:17:27,512 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.12 05:17:19" (1/3) ... [2021-12-18 05:17:27,513 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a2e20c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 05:17:27, skipping insertion in model container [2021-12-18 05:17:27,513 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:17:21" (2/3) ... [2021-12-18 05:17:27,513 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a2e20c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 05:17:27, skipping insertion in model container [2021-12-18 05:17:27,513 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 05:17:27" (3/3) ... [2021-12-18 05:17:27,514 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-18 05:17:27,519 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-18 05:17:27,520 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-18 05:17:27,581 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-18 05:17:27,590 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-18 05:17:27,590 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-18 05:17:27,649 INFO L276 IsEmpty]: Start isEmpty. Operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) [2021-12-18 05:17:27,671 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-12-18 05:17:27,671 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:17:27,673 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:17:27,673 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:17:27,678 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:17:27,679 INFO L85 PathProgramCache]: Analyzing trace with hash -838760980, now seen corresponding path program 1 times [2021-12-18 05:17:27,686 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:17:27,687 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1896989464] [2021-12-18 05:17:27,687 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:17:27,688 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:17:27,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:17:28,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:28,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:28,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:17:28,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:28,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:28,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:17:28,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:28,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:28,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:17:28,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:28,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:28,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:17:28,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:28,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:17:28,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:28,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:28,328 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-18 05:17:28,329 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:17:28,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1896989464] [2021-12-18 05:17:28,330 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1896989464] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:17:28,330 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:17:28,330 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 05:17:28,332 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1714531123] [2021-12-18 05:17:28,332 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:17:28,336 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 05:17:28,336 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:17:28,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 05:17:28,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-18 05:17:28,362 INFO L87 Difference]: Start difference. First operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 2 states have internal predecessors, (47), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:17:33,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:17:33,597 INFO L93 Difference]: Finished difference Result 3320 states and 4941 transitions. [2021-12-18 05:17:33,600 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-18 05:17:33,601 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 2 states have internal predecessors, (47), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 113 [2021-12-18 05:17:33,601 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:17:33,635 INFO L225 Difference]: With dead ends: 3320 [2021-12-18 05:17:33,635 INFO L226 Difference]: Without dead ends: 1727 [2021-12-18 05:17:33,659 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2021-12-18 05:17:33,667 INFO L933 BasicCegarLoop]: 2118 mSDtfsCounter, 1695 mSDsluCounter, 824 mSDsCounter, 0 mSdLazyCounter, 964 mSolverCounterSat, 1505 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1726 SdHoareTripleChecker+Valid, 2942 SdHoareTripleChecker+Invalid, 2469 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1505 IncrementalHoareTripleChecker+Valid, 964 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.0s IncrementalHoareTripleChecker+Time [2021-12-18 05:17:33,668 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1726 Valid, 2942 Invalid, 2469 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1505 Valid, 964 Invalid, 0 Unknown, 0 Unchecked, 5.0s Time] [2021-12-18 05:17:33,688 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1727 states. [2021-12-18 05:17:33,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1727 to 1565. [2021-12-18 05:17:33,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1565 states, 1099 states have (on average 1.3876251137397635) internal successors, (1525), 1154 states have internal predecessors, (1525), 373 states have call successors, (373), 93 states have call predecessors, (373), 92 states have return successors, (369), 343 states have call predecessors, (369), 369 states have call successors, (369) [2021-12-18 05:17:33,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1565 states to 1565 states and 2267 transitions. [2021-12-18 05:17:33,825 INFO L78 Accepts]: Start accepts. Automaton has 1565 states and 2267 transitions. Word has length 113 [2021-12-18 05:17:33,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:17:33,826 INFO L470 AbstractCegarLoop]: Abstraction has 1565 states and 2267 transitions. [2021-12-18 05:17:33,826 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 2 states have internal predecessors, (47), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:17:33,826 INFO L276 IsEmpty]: Start isEmpty. Operand 1565 states and 2267 transitions. [2021-12-18 05:17:33,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-12-18 05:17:33,830 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:17:33,830 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:17:33,830 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-18 05:17:33,831 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:17:33,831 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:17:33,831 INFO L85 PathProgramCache]: Analyzing trace with hash -1879567644, now seen corresponding path program 1 times [2021-12-18 05:17:33,832 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:17:33,832 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [537092824] [2021-12-18 05:17:33,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:17:33,832 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:17:33,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:33,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:17:33,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:34,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:34,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:17:34,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:34,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:34,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:17:34,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:34,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:34,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:17:34,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:34,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:34,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:17:34,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:34,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:17:34,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:34,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:34,181 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-18 05:17:34,182 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:17:34,182 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [537092824] [2021-12-18 05:17:34,182 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [537092824] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:17:34,183 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:17:34,183 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 05:17:34,183 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2090613287] [2021-12-18 05:17:34,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:17:34,185 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 05:17:34,185 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:17:34,186 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 05:17:34,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-18 05:17:34,186 INFO L87 Difference]: Start difference. First operand 1565 states and 2267 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:17:46,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:17:46,846 INFO L93 Difference]: Finished difference Result 4963 states and 7452 transitions. [2021-12-18 05:17:46,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 05:17:46,847 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 113 [2021-12-18 05:17:46,847 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:17:46,874 INFO L225 Difference]: With dead ends: 4963 [2021-12-18 05:17:46,875 INFO L226 Difference]: Without dead ends: 3421 [2021-12-18 05:17:46,883 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-12-18 05:17:46,889 INFO L933 BasicCegarLoop]: 2627 mSDtfsCounter, 4037 mSDsluCounter, 4457 mSDsCounter, 0 mSdLazyCounter, 4115 mSolverCounterSat, 2172 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4248 SdHoareTripleChecker+Valid, 7084 SdHoareTripleChecker+Invalid, 6287 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2172 IncrementalHoareTripleChecker+Valid, 4115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.3s IncrementalHoareTripleChecker+Time [2021-12-18 05:17:46,890 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4248 Valid, 7084 Invalid, 6287 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2172 Valid, 4115 Invalid, 0 Unknown, 0 Unchecked, 12.3s Time] [2021-12-18 05:17:46,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3421 states. [2021-12-18 05:17:47,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3421 to 3128. [2021-12-18 05:17:47,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3128 states, 2197 states have (on average 1.385980883022303) internal successors, (3045), 2307 states have internal predecessors, (3045), 738 states have call successors, (738), 184 states have call predecessors, (738), 192 states have return successors, (786), 690 states have call predecessors, (786), 734 states have call successors, (786) [2021-12-18 05:17:47,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3128 states to 3128 states and 4569 transitions. [2021-12-18 05:17:47,105 INFO L78 Accepts]: Start accepts. Automaton has 3128 states and 4569 transitions. Word has length 113 [2021-12-18 05:17:47,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:17:47,107 INFO L470 AbstractCegarLoop]: Abstraction has 3128 states and 4569 transitions. [2021-12-18 05:17:47,107 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:17:47,107 INFO L276 IsEmpty]: Start isEmpty. Operand 3128 states and 4569 transitions. [2021-12-18 05:17:47,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-12-18 05:17:47,122 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:17:47,123 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:17:47,123 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-18 05:17:47,123 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:17:47,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:17:47,124 INFO L85 PathProgramCache]: Analyzing trace with hash 1862399358, now seen corresponding path program 1 times [2021-12-18 05:17:47,124 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:17:47,124 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [386711371] [2021-12-18 05:17:47,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:17:47,125 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:17:47,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:17:47,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:47,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:47,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:17:47,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:47,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:47,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:17:47,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:47,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:47,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:17:47,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:47,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:47,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:17:47,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:47,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:17:47,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:47,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:47,454 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-18 05:17:47,455 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:17:47,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [386711371] [2021-12-18 05:17:47,455 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [386711371] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:17:47,455 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:17:47,455 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 05:17:47,456 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1968573326] [2021-12-18 05:17:47,456 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:17:47,457 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 05:17:47,457 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:17:47,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 05:17:47,458 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-18 05:17:47,458 INFO L87 Difference]: Start difference. First operand 3128 states and 4569 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:17:57,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:17:57,352 INFO L93 Difference]: Finished difference Result 9554 states and 14417 transitions. [2021-12-18 05:17:57,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 05:17:57,353 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-12-18 05:17:57,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:17:57,398 INFO L225 Difference]: With dead ends: 9554 [2021-12-18 05:17:57,398 INFO L226 Difference]: Without dead ends: 6449 [2021-12-18 05:17:57,419 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-12-18 05:17:57,422 INFO L933 BasicCegarLoop]: 2342 mSDtfsCounter, 3826 mSDsluCounter, 4101 mSDsCounter, 0 mSdLazyCounter, 3754 mSolverCounterSat, 2171 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4004 SdHoareTripleChecker+Valid, 6443 SdHoareTripleChecker+Invalid, 5925 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2171 IncrementalHoareTripleChecker+Valid, 3754 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.6s IncrementalHoareTripleChecker+Time [2021-12-18 05:17:57,426 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4004 Valid, 6443 Invalid, 5925 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2171 Valid, 3754 Invalid, 0 Unknown, 0 Unchecked, 9.6s Time] [2021-12-18 05:17:57,434 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6449 states. [2021-12-18 05:17:57,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6449 to 5863. [2021-12-18 05:17:57,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5863 states, 4118 states have (on average 1.3919378338999515) internal successors, (5732), 4333 states have internal predecessors, (5732), 1377 states have call successors, (1377), 350 states have call predecessors, (1377), 367 states have return successors, (1475), 1285 states have call predecessors, (1475), 1373 states have call successors, (1475) [2021-12-18 05:17:57,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5863 states to 5863 states and 8584 transitions. [2021-12-18 05:17:57,765 INFO L78 Accepts]: Start accepts. Automaton has 5863 states and 8584 transitions. Word has length 114 [2021-12-18 05:17:57,766 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:17:57,766 INFO L470 AbstractCegarLoop]: Abstraction has 5863 states and 8584 transitions. [2021-12-18 05:17:57,766 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:17:57,767 INFO L276 IsEmpty]: Start isEmpty. Operand 5863 states and 8584 transitions. [2021-12-18 05:17:57,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-12-18 05:17:57,770 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:17:57,770 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:17:57,770 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-18 05:17:57,771 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:17:57,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:17:57,771 INFO L85 PathProgramCache]: Analyzing trace with hash 1899264295, now seen corresponding path program 1 times [2021-12-18 05:17:57,772 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:17:57,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492463596] [2021-12-18 05:17:57,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:17:57,772 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:17:57,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:17:57,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:57,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:57,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:17:57,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:57,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:57,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:17:57,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:57,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:57,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:17:57,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:57,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:57,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:58,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:17:58,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:58,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:17:58,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:58,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:58,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:58,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:17:58,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:58,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:17:58,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:17:58,049 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-18 05:17:58,049 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:17:58,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492463596] [2021-12-18 05:17:58,049 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492463596] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:17:58,050 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:17:58,050 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 05:17:58,050 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [495260341] [2021-12-18 05:17:58,050 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:17:58,051 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 05:17:58,051 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:17:58,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 05:17:58,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-18 05:17:58,052 INFO L87 Difference]: Start difference. First operand 5863 states and 8584 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:18:02,199 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:18:02,200 INFO L93 Difference]: Finished difference Result 6444 states and 9628 transitions. [2021-12-18 05:18:02,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 05:18:02,200 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 115 [2021-12-18 05:18:02,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:18:02,248 INFO L225 Difference]: With dead ends: 6444 [2021-12-18 05:18:02,248 INFO L226 Difference]: Without dead ends: 6441 [2021-12-18 05:18:02,255 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-18 05:18:02,256 INFO L933 BasicCegarLoop]: 2041 mSDtfsCounter, 3609 mSDsluCounter, 812 mSDsCounter, 0 mSdLazyCounter, 992 mSolverCounterSat, 1830 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3824 SdHoareTripleChecker+Valid, 2853 SdHoareTripleChecker+Invalid, 2822 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1830 IncrementalHoareTripleChecker+Valid, 992 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2021-12-18 05:18:02,257 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3824 Valid, 2853 Invalid, 2822 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1830 Valid, 992 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2021-12-18 05:18:02,264 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6441 states. [2021-12-18 05:18:02,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6441 to 5862. [2021-12-18 05:18:02,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5862 states, 4118 states have (on average 1.3916949975716366) internal successors, (5731), 4332 states have internal predecessors, (5731), 1376 states have call successors, (1376), 350 states have call predecessors, (1376), 367 states have return successors, (1475), 1285 states have call predecessors, (1475), 1373 states have call successors, (1475) [2021-12-18 05:18:02,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5862 states to 5862 states and 8582 transitions. [2021-12-18 05:18:02,561 INFO L78 Accepts]: Start accepts. Automaton has 5862 states and 8582 transitions. Word has length 115 [2021-12-18 05:18:02,561 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:18:02,561 INFO L470 AbstractCegarLoop]: Abstraction has 5862 states and 8582 transitions. [2021-12-18 05:18:02,562 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:18:02,562 INFO L276 IsEmpty]: Start isEmpty. Operand 5862 states and 8582 transitions. [2021-12-18 05:18:02,564 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-12-18 05:18:02,565 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:18:02,565 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:18:02,565 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-18 05:18:02,565 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:18:02,566 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:18:02,566 INFO L85 PathProgramCache]: Analyzing trace with hash -1252885087, now seen corresponding path program 1 times [2021-12-18 05:18:02,566 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:18:02,566 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1263471177] [2021-12-18 05:18:02,566 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:18:02,566 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:18:02,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:18:02,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:02,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:02,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:18:02,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:02,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:02,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:18:02,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:02,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:02,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:18:02,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:02,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:02,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:18:02,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:02,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:18:02,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:02,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:02,826 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-12-18 05:18:02,827 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:18:02,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1263471177] [2021-12-18 05:18:02,827 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1263471177] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:18:02,827 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:18:02,827 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 05:18:02,827 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [233580693] [2021-12-18 05:18:02,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:18:02,828 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 05:18:02,828 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:18:02,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 05:18:02,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-18 05:18:02,829 INFO L87 Difference]: Start difference. First operand 5862 states and 8582 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:18:08,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:18:08,961 INFO L93 Difference]: Finished difference Result 6443 states and 9626 transitions. [2021-12-18 05:18:08,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-18 05:18:08,962 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 116 [2021-12-18 05:18:08,962 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:18:09,012 INFO L225 Difference]: With dead ends: 6443 [2021-12-18 05:18:09,013 INFO L226 Difference]: Without dead ends: 6411 [2021-12-18 05:18:09,022 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-12-18 05:18:09,023 INFO L933 BasicCegarLoop]: 2046 mSDtfsCounter, 3089 mSDsluCounter, 1488 mSDsCounter, 0 mSdLazyCounter, 1665 mSolverCounterSat, 1368 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3304 SdHoareTripleChecker+Valid, 3534 SdHoareTripleChecker+Invalid, 3033 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1368 IncrementalHoareTripleChecker+Valid, 1665 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2021-12-18 05:18:09,024 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3304 Valid, 3534 Invalid, 3033 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1368 Valid, 1665 Invalid, 0 Unknown, 0 Unchecked, 5.9s Time] [2021-12-18 05:18:09,030 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6411 states. [2021-12-18 05:18:09,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6411 to 5832. [2021-12-18 05:18:09,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5832 states, 4102 states have (on average 1.3922476840565579) internal successors, (5711), 4315 states have internal predecessors, (5711), 1363 states have call successors, (1363), 349 states have call predecessors, (1363), 366 states have return successors, (1463), 1273 states have call predecessors, (1463), 1361 states have call successors, (1463) [2021-12-18 05:18:09,303 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5832 states to 5832 states and 8537 transitions. [2021-12-18 05:18:09,304 INFO L78 Accepts]: Start accepts. Automaton has 5832 states and 8537 transitions. Word has length 116 [2021-12-18 05:18:09,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:18:09,305 INFO L470 AbstractCegarLoop]: Abstraction has 5832 states and 8537 transitions. [2021-12-18 05:18:09,305 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-18 05:18:09,306 INFO L276 IsEmpty]: Start isEmpty. Operand 5832 states and 8537 transitions. [2021-12-18 05:18:09,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 167 [2021-12-18 05:18:09,313 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:18:09,314 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:18:09,314 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-18 05:18:09,314 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:18:09,314 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:18:09,315 INFO L85 PathProgramCache]: Analyzing trace with hash -779411748, now seen corresponding path program 1 times [2021-12-18 05:18:09,315 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:18:09,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1337996044] [2021-12-18 05:18:09,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:18:09,317 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:18:09,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:18:09,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:09,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:09,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:18:09,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:09,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:09,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:18:09,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:09,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:09,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:18:09,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:09,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:09,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:18:09,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:09,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:18:09,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:09,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-18 05:18:09,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-18 05:18:09,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-18 05:18:09,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2021-12-18 05:18:09,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-18 05:18:09,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:09,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-12-18 05:18:09,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:09,595 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-12-18 05:18:09,595 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:18:09,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1337996044] [2021-12-18 05:18:09,595 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1337996044] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:18:09,595 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:18:09,595 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-18 05:18:09,596 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [204023767] [2021-12-18 05:18:09,596 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:18:09,596 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-18 05:18:09,596 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:18:09,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-18 05:18:09,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-18 05:18:09,597 INFO L87 Difference]: Start difference. First operand 5832 states and 8537 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-18 05:18:22,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:18:22,013 INFO L93 Difference]: Finished difference Result 20022 states and 30342 transitions. [2021-12-18 05:18:22,014 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-18 05:18:22,014 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 166 [2021-12-18 05:18:22,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:18:22,104 INFO L225 Difference]: With dead ends: 20022 [2021-12-18 05:18:22,104 INFO L226 Difference]: Without dead ends: 14213 [2021-12-18 05:18:22,139 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-12-18 05:18:22,141 INFO L933 BasicCegarLoop]: 2277 mSDtfsCounter, 7200 mSDsluCounter, 4848 mSDsCounter, 0 mSdLazyCounter, 5820 mSolverCounterSat, 5833 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7516 SdHoareTripleChecker+Valid, 7125 SdHoareTripleChecker+Invalid, 11653 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5833 IncrementalHoareTripleChecker+Valid, 5820 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.7s IncrementalHoareTripleChecker+Time [2021-12-18 05:18:22,141 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7516 Valid, 7125 Invalid, 11653 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5833 Valid, 5820 Invalid, 0 Unknown, 0 Unchecked, 11.7s Time] [2021-12-18 05:18:22,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14213 states. [2021-12-18 05:18:22,699 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14213 to 12528. [2021-12-18 05:18:22,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12528 states, 8714 states have (on average 1.3847831076428736) internal successors, (12067), 9225 states have internal predecessors, (12067), 2933 states have call successors, (2933), 677 states have call predecessors, (2933), 880 states have return successors, (3800), 2907 states have call predecessors, (3800), 2931 states have call successors, (3800) [2021-12-18 05:18:22,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12528 states to 12528 states and 18800 transitions. [2021-12-18 05:18:22,897 INFO L78 Accepts]: Start accepts. Automaton has 12528 states and 18800 transitions. Word has length 166 [2021-12-18 05:18:22,897 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:18:22,897 INFO L470 AbstractCegarLoop]: Abstraction has 12528 states and 18800 transitions. [2021-12-18 05:18:22,897 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-18 05:18:22,898 INFO L276 IsEmpty]: Start isEmpty. Operand 12528 states and 18800 transitions. [2021-12-18 05:18:22,923 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 205 [2021-12-18 05:18:22,923 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:18:22,924 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:18:22,924 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-18 05:18:22,924 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:18:22,925 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:18:22,925 INFO L85 PathProgramCache]: Analyzing trace with hash 2017075681, now seen corresponding path program 1 times [2021-12-18 05:18:22,925 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:18:22,925 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1779676529] [2021-12-18 05:18:22,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:18:22,925 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:18:23,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:18:23,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:23,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:23,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:18:23,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:23,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:23,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:18:23,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:23,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:23,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:18:23,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:23,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:23,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:18:23,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:23,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:18:23,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:23,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-18 05:18:23,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:23,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:23,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-18 05:18:23,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2021-12-18 05:18:23,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2021-12-18 05:18:23,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-12-18 05:18:23,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-18 05:18:23,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:23,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 172 [2021-12-18 05:18:23,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:23,275 INFO L134 CoverageAnalysis]: Checked inductivity of 182 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 165 trivial. 0 not checked. [2021-12-18 05:18:23,275 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:18:23,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1779676529] [2021-12-18 05:18:23,275 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1779676529] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:18:23,276 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:18:23,276 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-18 05:18:23,276 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [436023642] [2021-12-18 05:18:23,276 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:18:23,277 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-18 05:18:23,277 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:18:23,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-18 05:18:23,277 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-12-18 05:18:23,278 INFO L87 Difference]: Start difference. First operand 12528 states and 18800 transitions. Second operand has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-18 05:18:33,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:18:33,409 INFO L93 Difference]: Finished difference Result 29013 states and 44652 transitions. [2021-12-18 05:18:33,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-18 05:18:33,410 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 204 [2021-12-18 05:18:33,410 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:18:33,489 INFO L225 Difference]: With dead ends: 29013 [2021-12-18 05:18:33,489 INFO L226 Difference]: Without dead ends: 16508 [2021-12-18 05:18:33,541 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=225, Unknown=0, NotChecked=0, Total=306 [2021-12-18 05:18:33,543 INFO L933 BasicCegarLoop]: 2336 mSDtfsCounter, 5252 mSDsluCounter, 5541 mSDsCounter, 0 mSdLazyCounter, 4875 mSolverCounterSat, 3803 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5521 SdHoareTripleChecker+Valid, 7877 SdHoareTripleChecker+Invalid, 8678 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3803 IncrementalHoareTripleChecker+Valid, 4875 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.4s IncrementalHoareTripleChecker+Time [2021-12-18 05:18:33,543 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5521 Valid, 7877 Invalid, 8678 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3803 Valid, 4875 Invalid, 0 Unknown, 0 Unchecked, 9.4s Time] [2021-12-18 05:18:33,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16508 states. [2021-12-18 05:18:34,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16508 to 12542. [2021-12-18 05:18:34,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12542 states, 8728 states have (on average 1.38416590284143) internal successors, (12081), 9239 states have internal predecessors, (12081), 2933 states have call successors, (2933), 677 states have call predecessors, (2933), 880 states have return successors, (3800), 2907 states have call predecessors, (3800), 2931 states have call successors, (3800) [2021-12-18 05:18:34,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12542 states to 12542 states and 18814 transitions. [2021-12-18 05:18:34,183 INFO L78 Accepts]: Start accepts. Automaton has 12542 states and 18814 transitions. Word has length 204 [2021-12-18 05:18:34,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:18:34,184 INFO L470 AbstractCegarLoop]: Abstraction has 12542 states and 18814 transitions. [2021-12-18 05:18:34,184 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-18 05:18:34,184 INFO L276 IsEmpty]: Start isEmpty. Operand 12542 states and 18814 transitions. [2021-12-18 05:18:34,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 222 [2021-12-18 05:18:34,204 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:18:34,205 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:18:34,205 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-18 05:18:34,205 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:18:34,205 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:18:34,206 INFO L85 PathProgramCache]: Analyzing trace with hash 669285560, now seen corresponding path program 1 times [2021-12-18 05:18:34,206 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:18:34,206 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1735599324] [2021-12-18 05:18:34,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:18:34,206 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:18:34,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:18:34,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:34,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:34,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:18:34,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:34,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:34,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:18:34,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:34,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:34,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:18:34,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:34,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:34,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:18:34,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:34,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:18:34,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:34,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-18 05:18:34,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:34,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:34,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-18 05:18:34,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:34,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:34,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-18 05:18:34,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-12-18 05:18:34,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-12-18 05:18:34,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-18 05:18:34,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-18 05:18:34,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:34,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-12-18 05:18:34,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:34,666 INFO L134 CoverageAnalysis]: Checked inductivity of 252 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 234 trivial. 0 not checked. [2021-12-18 05:18:34,666 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:18:34,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1735599324] [2021-12-18 05:18:34,667 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1735599324] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:18:34,667 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:18:34,667 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-18 05:18:34,667 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67321451] [2021-12-18 05:18:34,667 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:18:34,668 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-18 05:18:34,668 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:18:34,668 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-18 05:18:34,669 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-12-18 05:18:34,669 INFO L87 Difference]: Start difference. First operand 12542 states and 18814 transitions. Second operand has 8 states, 8 states have (on average 12.875) internal successors, (103), 3 states have internal predecessors, (103), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-18 05:18:52,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:18:52,717 INFO L93 Difference]: Finished difference Result 40379 states and 61522 transitions. [2021-12-18 05:18:52,717 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-18 05:18:52,718 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.875) internal successors, (103), 3 states have internal predecessors, (103), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 221 [2021-12-18 05:18:52,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:18:52,879 INFO L225 Difference]: With dead ends: 40379 [2021-12-18 05:18:52,880 INFO L226 Difference]: Without dead ends: 27860 [2021-12-18 05:18:53,036 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-12-18 05:18:53,037 INFO L933 BasicCegarLoop]: 3455 mSDtfsCounter, 4866 mSDsluCounter, 7109 mSDsCounter, 0 mSdLazyCounter, 8528 mSolverCounterSat, 4360 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5221 SdHoareTripleChecker+Valid, 10564 SdHoareTripleChecker+Invalid, 12888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 4360 IncrementalHoareTripleChecker+Valid, 8528 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.0s IncrementalHoareTripleChecker+Time [2021-12-18 05:18:53,037 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5221 Valid, 10564 Invalid, 12888 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [4360 Valid, 8528 Invalid, 0 Unknown, 0 Unchecked, 17.0s Time] [2021-12-18 05:18:53,060 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27860 states. [2021-12-18 05:18:54,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27860 to 24607. [2021-12-18 05:18:54,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24607 states, 17148 states have (on average 1.3852927455096804) internal successors, (23755), 18149 states have internal predecessors, (23755), 5723 states have call successors, (5723), 1328 states have call predecessors, (5723), 1735 states have return successors, (7451), 5673 states have call predecessors, (7451), 5721 states have call successors, (7451) [2021-12-18 05:18:54,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24607 states to 24607 states and 36929 transitions. [2021-12-18 05:18:54,332 INFO L78 Accepts]: Start accepts. Automaton has 24607 states and 36929 transitions. Word has length 221 [2021-12-18 05:18:54,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:18:54,332 INFO L470 AbstractCegarLoop]: Abstraction has 24607 states and 36929 transitions. [2021-12-18 05:18:54,333 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.875) internal successors, (103), 3 states have internal predecessors, (103), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-18 05:18:54,333 INFO L276 IsEmpty]: Start isEmpty. Operand 24607 states and 36929 transitions. [2021-12-18 05:18:54,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 248 [2021-12-18 05:18:54,379 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:18:54,379 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:18:54,380 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-18 05:18:54,380 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:18:54,380 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:18:54,380 INFO L85 PathProgramCache]: Analyzing trace with hash 1675118902, now seen corresponding path program 1 times [2021-12-18 05:18:54,380 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:18:54,381 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [796490498] [2021-12-18 05:18:54,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:18:54,381 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:18:54,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:18:54,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:54,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:54,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:18:54,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:54,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:54,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:18:54,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:54,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:54,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:18:54,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:54,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:54,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:18:54,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:54,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:18:54,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:54,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-18 05:18:54,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:54,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:18:54,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2021-12-18 05:18:54,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-12-18 05:18:54,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2021-12-18 05:18:54,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2021-12-18 05:18:54,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-12-18 05:18:54,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2021-12-18 05:18:54,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-18 05:18:54,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-12-18 05:18:54,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2021-12-18 05:18:54,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-12-18 05:18:54,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2021-12-18 05:18:54,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:18:54,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 215 [2021-12-18 05:18:54,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:18:54,819 INFO L134 CoverageAnalysis]: Checked inductivity of 213 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 194 trivial. 0 not checked. [2021-12-18 05:18:54,819 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:18:54,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [796490498] [2021-12-18 05:18:54,820 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [796490498] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:18:54,820 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:18:54,820 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-12-18 05:18:54,820 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695990053] [2021-12-18 05:18:54,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:18:54,821 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-12-18 05:18:54,821 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:18:54,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-12-18 05:18:54,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=85, Unknown=0, NotChecked=0, Total=110 [2021-12-18 05:18:54,823 INFO L87 Difference]: Start difference. First operand 24607 states and 36929 transitions. Second operand has 11 states, 11 states have (on average 10.545454545454545) internal successors, (116), 5 states have internal predecessors, (116), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2021-12-18 05:19:04,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:19:04,176 INFO L93 Difference]: Finished difference Result 42124 states and 63723 transitions. [2021-12-18 05:19:04,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-18 05:19:04,177 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 10.545454545454545) internal successors, (116), 5 states have internal predecessors, (116), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 247 [2021-12-18 05:19:04,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:19:04,279 INFO L225 Difference]: With dead ends: 42124 [2021-12-18 05:19:04,280 INFO L226 Difference]: Without dead ends: 17329 [2021-12-18 05:19:04,365 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=78, Invalid=228, Unknown=0, NotChecked=0, Total=306 [2021-12-18 05:19:04,366 INFO L933 BasicCegarLoop]: 1988 mSDtfsCounter, 4129 mSDsluCounter, 6586 mSDsCounter, 0 mSdLazyCounter, 5470 mSolverCounterSat, 3998 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4272 SdHoareTripleChecker+Valid, 8574 SdHoareTripleChecker+Invalid, 9468 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3998 IncrementalHoareTripleChecker+Valid, 5470 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.4s IncrementalHoareTripleChecker+Time [2021-12-18 05:19:04,367 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4272 Valid, 8574 Invalid, 9468 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3998 Valid, 5470 Invalid, 0 Unknown, 0 Unchecked, 8.4s Time] [2021-12-18 05:19:04,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17329 states. [2021-12-18 05:19:05,252 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17329 to 15247. [2021-12-18 05:19:05,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15247 states, 10611 states have (on average 1.3826218075581944) internal successors, (14671), 11233 states have internal predecessors, (14671), 3547 states have call successors, (3547), 834 states have call predecessors, (3547), 1088 states have return successors, (4620), 3513 states have call predecessors, (4620), 3545 states have call successors, (4620) [2021-12-18 05:19:05,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15247 states to 15247 states and 22838 transitions. [2021-12-18 05:19:05,353 INFO L78 Accepts]: Start accepts. Automaton has 15247 states and 22838 transitions. Word has length 247 [2021-12-18 05:19:05,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:19:05,353 INFO L470 AbstractCegarLoop]: Abstraction has 15247 states and 22838 transitions. [2021-12-18 05:19:05,354 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 10.545454545454545) internal successors, (116), 5 states have internal predecessors, (116), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2021-12-18 05:19:05,354 INFO L276 IsEmpty]: Start isEmpty. Operand 15247 states and 22838 transitions. [2021-12-18 05:19:05,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 284 [2021-12-18 05:19:05,417 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:19:05,417 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:19:05,418 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-18 05:19:05,418 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:19:05,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:19:05,418 INFO L85 PathProgramCache]: Analyzing trace with hash -472580315, now seen corresponding path program 1 times [2021-12-18 05:19:05,419 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:19:05,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1040019455] [2021-12-18 05:19:05,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:19:05,419 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:19:05,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:05,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:05,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:05,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:05,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:19:05,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:05,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:19:05,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:05,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:19:05,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:19:05,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-12-18 05:19:05,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:05,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:05,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:05,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-18 05:19:05,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-18 05:19:05,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-18 05:19:05,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-18 05:19:05,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:05,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:05,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:05,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-18 05:19:05,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-18 05:19:05,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-18 05:19:05,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-18 05:19:05,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-18 05:19:05,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:05,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:05,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-18 05:19:05,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-18 05:19:05,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-18 05:19:05,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:05,927 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-18 05:19:05,927 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:19:05,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1040019455] [2021-12-18 05:19:05,927 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1040019455] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:19:05,928 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:19:05,928 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-18 05:19:05,928 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1261428008] [2021-12-18 05:19:05,928 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:19:05,929 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-18 05:19:05,929 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:19:05,929 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-18 05:19:05,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-18 05:19:05,930 INFO L87 Difference]: Start difference. First operand 15247 states and 22838 transitions. Second operand has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:19:14,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:19:14,498 INFO L93 Difference]: Finished difference Result 32549 states and 49312 transitions. [2021-12-18 05:19:14,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-18 05:19:14,499 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 283 [2021-12-18 05:19:14,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:19:14,582 INFO L225 Difference]: With dead ends: 32549 [2021-12-18 05:19:14,583 INFO L226 Difference]: Without dead ends: 17335 [2021-12-18 05:19:14,626 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-18 05:19:14,627 INFO L933 BasicCegarLoop]: 1876 mSDtfsCounter, 5316 mSDsluCounter, 2925 mSDsCounter, 0 mSdLazyCounter, 4156 mSolverCounterSat, 3673 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5588 SdHoareTripleChecker+Valid, 4801 SdHoareTripleChecker+Invalid, 7829 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3673 IncrementalHoareTripleChecker+Valid, 4156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.7s IncrementalHoareTripleChecker+Time [2021-12-18 05:19:14,628 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5588 Valid, 4801 Invalid, 7829 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3673 Valid, 4156 Invalid, 0 Unknown, 0 Unchecked, 7.7s Time] [2021-12-18 05:19:14,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17335 states. [2021-12-18 05:19:15,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17335 to 15227. [2021-12-18 05:19:15,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15227 states, 10601 states have (on average 1.38203943024243) internal successors, (14651), 11223 states have internal predecessors, (14651), 3537 states have call successors, (3537), 834 states have call predecessors, (3537), 1088 states have return successors, (4590), 3503 states have call predecessors, (4590), 3535 states have call successors, (4590) [2021-12-18 05:19:15,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15227 states to 15227 states and 22778 transitions. [2021-12-18 05:19:15,461 INFO L78 Accepts]: Start accepts. Automaton has 15227 states and 22778 transitions. Word has length 283 [2021-12-18 05:19:15,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:19:15,462 INFO L470 AbstractCegarLoop]: Abstraction has 15227 states and 22778 transitions. [2021-12-18 05:19:15,462 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:19:15,462 INFO L276 IsEmpty]: Start isEmpty. Operand 15227 states and 22778 transitions. [2021-12-18 05:19:15,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 281 [2021-12-18 05:19:15,499 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:19:15,499 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:19:15,500 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-18 05:19:15,500 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:19:15,500 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:19:15,500 INFO L85 PathProgramCache]: Analyzing trace with hash -661611690, now seen corresponding path program 1 times [2021-12-18 05:19:15,501 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:19:15,501 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [984009272] [2021-12-18 05:19:15,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:19:15,501 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:19:15,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:15,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:15,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:15,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:15,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:19:15,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:15,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:19:15,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:15,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:19:15,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:19:15,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-18 05:19:15,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:15,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:15,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:15,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-18 05:19:15,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-18 05:19:15,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-18 05:19:15,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-18 05:19:15,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:15,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:15,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:15,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-18 05:19:15,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-18 05:19:15,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-18 05:19:15,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-18 05:19:15,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-18 05:19:15,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:15,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:15,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-18 05:19:15,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-18 05:19:15,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:15,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-18 05:19:15,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:16,003 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-18 05:19:16,003 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:19:16,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [984009272] [2021-12-18 05:19:16,004 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [984009272] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:19:16,004 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:19:16,004 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-18 05:19:16,004 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [654006649] [2021-12-18 05:19:16,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:19:16,005 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-18 05:19:16,006 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:19:16,006 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-18 05:19:16,006 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-18 05:19:16,007 INFO L87 Difference]: Start difference. First operand 15227 states and 22778 transitions. Second operand has 13 states, 13 states have (on average 12.0) internal successors, (156), 5 states have internal predecessors, (156), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:19:26,683 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:19:26,683 INFO L93 Difference]: Finished difference Result 32509 states and 49187 transitions. [2021-12-18 05:19:26,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-18 05:19:26,688 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.0) internal successors, (156), 5 states have internal predecessors, (156), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 280 [2021-12-18 05:19:26,688 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:19:26,777 INFO L225 Difference]: With dead ends: 32509 [2021-12-18 05:19:26,777 INFO L226 Difference]: Without dead ends: 17315 [2021-12-18 05:19:26,829 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-18 05:19:26,830 INFO L933 BasicCegarLoop]: 1871 mSDtfsCounter, 5752 mSDsluCounter, 3490 mSDsCounter, 0 mSdLazyCounter, 4945 mSolverCounterSat, 4587 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6024 SdHoareTripleChecker+Valid, 5361 SdHoareTripleChecker+Invalid, 9532 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4587 IncrementalHoareTripleChecker+Valid, 4945 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.6s IncrementalHoareTripleChecker+Time [2021-12-18 05:19:26,831 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6024 Valid, 5361 Invalid, 9532 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4587 Valid, 4945 Invalid, 0 Unknown, 0 Unchecked, 9.6s Time] [2021-12-18 05:19:26,846 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17315 states. [2021-12-18 05:19:27,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17315 to 15207. [2021-12-18 05:19:27,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15207 states, 10591 states have (on average 1.381455953167784) internal successors, (14631), 11213 states have internal predecessors, (14631), 3527 states have call successors, (3527), 834 states have call predecessors, (3527), 1088 states have return successors, (4560), 3493 states have call predecessors, (4560), 3525 states have call successors, (4560) [2021-12-18 05:19:27,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15207 states to 15207 states and 22718 transitions. [2021-12-18 05:19:27,704 INFO L78 Accepts]: Start accepts. Automaton has 15207 states and 22718 transitions. Word has length 280 [2021-12-18 05:19:27,704 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:19:27,704 INFO L470 AbstractCegarLoop]: Abstraction has 15207 states and 22718 transitions. [2021-12-18 05:19:27,705 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.0) internal successors, (156), 5 states have internal predecessors, (156), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:19:27,705 INFO L276 IsEmpty]: Start isEmpty. Operand 15207 states and 22718 transitions. [2021-12-18 05:19:27,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 283 [2021-12-18 05:19:27,740 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:19:27,740 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:19:27,741 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-18 05:19:27,741 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:19:27,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:19:27,742 INFO L85 PathProgramCache]: Analyzing trace with hash -535877291, now seen corresponding path program 1 times [2021-12-18 05:19:27,742 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:19:27,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [288047249] [2021-12-18 05:19:27,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:19:27,743 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:19:27,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:27,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:27,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:27,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:27,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:27,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:27,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:19:27,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:27,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:27,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:19:27,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:27,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:27,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:19:27,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:27,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:19:27,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:27,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:27,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-18 05:19:28,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:28,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:28,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:28,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-18 05:19:28,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-18 05:19:28,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-18 05:19:28,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:28,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-18 05:19:28,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:28,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:28,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:28,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:28,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:28,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-18 05:19:28,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-18 05:19:28,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-18 05:19:28,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-18 05:19:28,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-18 05:19:28,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:28,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:28,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:28,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-18 05:19:28,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-18 05:19:28,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-18 05:19:28,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:28,275 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-18 05:19:28,275 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:19:28,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [288047249] [2021-12-18 05:19:28,275 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [288047249] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:19:28,275 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:19:28,276 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-18 05:19:28,276 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1412896591] [2021-12-18 05:19:28,276 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:19:28,278 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-18 05:19:28,278 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:19:28,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-18 05:19:28,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-18 05:19:28,280 INFO L87 Difference]: Start difference. First operand 15207 states and 22718 transitions. Second operand has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:19:40,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:19:40,065 INFO L93 Difference]: Finished difference Result 32469 states and 49062 transitions. [2021-12-18 05:19:40,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-18 05:19:40,066 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 282 [2021-12-18 05:19:40,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:19:40,130 INFO L225 Difference]: With dead ends: 32469 [2021-12-18 05:19:40,130 INFO L226 Difference]: Without dead ends: 17295 [2021-12-18 05:19:40,168 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-18 05:19:40,169 INFO L933 BasicCegarLoop]: 1880 mSDtfsCounter, 5465 mSDsluCounter, 4031 mSDsCounter, 0 mSdLazyCounter, 6367 mSolverCounterSat, 4442 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5735 SdHoareTripleChecker+Valid, 5911 SdHoareTripleChecker+Invalid, 10809 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4442 IncrementalHoareTripleChecker+Valid, 6367 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.7s IncrementalHoareTripleChecker+Time [2021-12-18 05:19:40,169 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5735 Valid, 5911 Invalid, 10809 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4442 Valid, 6367 Invalid, 0 Unknown, 0 Unchecked, 10.7s Time] [2021-12-18 05:19:40,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17295 states. [2021-12-18 05:19:40,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17295 to 15187. [2021-12-18 05:19:40,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15187 states, 10581 states have (on average 1.3808713732161422) internal successors, (14611), 11203 states have internal predecessors, (14611), 3517 states have call successors, (3517), 834 states have call predecessors, (3517), 1088 states have return successors, (4530), 3483 states have call predecessors, (4530), 3515 states have call successors, (4530) [2021-12-18 05:19:41,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15187 states to 15187 states and 22658 transitions. [2021-12-18 05:19:41,131 INFO L78 Accepts]: Start accepts. Automaton has 15187 states and 22658 transitions. Word has length 282 [2021-12-18 05:19:41,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:19:41,131 INFO L470 AbstractCegarLoop]: Abstraction has 15187 states and 22658 transitions. [2021-12-18 05:19:41,131 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:19:41,131 INFO L276 IsEmpty]: Start isEmpty. Operand 15187 states and 22658 transitions. [2021-12-18 05:19:41,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 282 [2021-12-18 05:19:41,165 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:19:41,165 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:19:41,165 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-12-18 05:19:41,165 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:19:41,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:19:41,166 INFO L85 PathProgramCache]: Analyzing trace with hash 1923689798, now seen corresponding path program 1 times [2021-12-18 05:19:41,166 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:19:41,167 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [345530511] [2021-12-18 05:19:41,167 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:19:41,167 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:19:41,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:41,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:41,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:41,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:41,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:19:41,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:41,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:19:41,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:41,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:19:41,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:19:41,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-12-18 05:19:41,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:41,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:41,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:41,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-18 05:19:41,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-18 05:19:41,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-18 05:19:41,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-18 05:19:41,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:41,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:41,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-18 05:19:41,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-18 05:19:41,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-12-18 05:19:41,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-18 05:19:41,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-12-18 05:19:41,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-18 05:19:41,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:41,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:41,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-18 05:19:41,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-18 05:19:41,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-18 05:19:41,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:41,718 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-12-18 05:19:41,718 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:19:41,719 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [345530511] [2021-12-18 05:19:41,719 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [345530511] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:19:41,719 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:19:41,719 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-12-18 05:19:41,719 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [706455374] [2021-12-18 05:19:41,719 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:19:41,720 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-18 05:19:41,720 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:19:41,721 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-18 05:19:41,721 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-12-18 05:19:41,721 INFO L87 Difference]: Start difference. First operand 15187 states and 22658 transitions. Second operand has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:19:53,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:19:53,542 INFO L93 Difference]: Finished difference Result 32429 states and 48937 transitions. [2021-12-18 05:19:53,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-18 05:19:53,545 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 281 [2021-12-18 05:19:53,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:19:53,611 INFO L225 Difference]: With dead ends: 32429 [2021-12-18 05:19:53,611 INFO L226 Difference]: Without dead ends: 17275 [2021-12-18 05:19:53,647 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-12-18 05:19:53,648 INFO L933 BasicCegarLoop]: 1915 mSDtfsCounter, 5896 mSDsluCounter, 4101 mSDsCounter, 0 mSdLazyCounter, 6304 mSolverCounterSat, 4920 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6160 SdHoareTripleChecker+Valid, 6016 SdHoareTripleChecker+Invalid, 11224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4920 IncrementalHoareTripleChecker+Valid, 6304 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.9s IncrementalHoareTripleChecker+Time [2021-12-18 05:19:53,648 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6160 Valid, 6016 Invalid, 11224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4920 Valid, 6304 Invalid, 0 Unknown, 0 Unchecked, 10.9s Time] [2021-12-18 05:19:53,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17275 states. [2021-12-18 05:19:54,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17275 to 15167. [2021-12-18 05:19:54,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15167 states, 10571 states have (on average 1.3802856872575915) internal successors, (14591), 11193 states have internal predecessors, (14591), 3507 states have call successors, (3507), 834 states have call predecessors, (3507), 1088 states have return successors, (4500), 3473 states have call predecessors, (4500), 3505 states have call successors, (4500) [2021-12-18 05:19:54,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15167 states to 15167 states and 22598 transitions. [2021-12-18 05:19:54,388 INFO L78 Accepts]: Start accepts. Automaton has 15167 states and 22598 transitions. Word has length 281 [2021-12-18 05:19:54,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:19:54,389 INFO L470 AbstractCegarLoop]: Abstraction has 15167 states and 22598 transitions. [2021-12-18 05:19:54,389 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:19:54,389 INFO L276 IsEmpty]: Start isEmpty. Operand 15167 states and 22598 transitions. [2021-12-18 05:19:54,412 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 297 [2021-12-18 05:19:54,412 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:19:54,413 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:19:54,413 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-12-18 05:19:54,413 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:19:54,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:19:54,414 INFO L85 PathProgramCache]: Analyzing trace with hash 790150926, now seen corresponding path program 1 times [2021-12-18 05:19:54,414 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:19:54,414 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [82472771] [2021-12-18 05:19:54,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:19:54,415 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:19:54,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:54,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:54,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:54,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:54,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:54,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:54,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:19:54,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:54,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:54,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:19:54,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:54,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:54,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:19:54,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:54,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:19:54,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:54,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-18 05:19:54,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:54,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:54,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-18 05:19:54,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:54,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:54,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-18 05:19:54,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-12-18 05:19:54,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-12-18 05:19:54,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-18 05:19:54,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-18 05:19:54,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:54,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-12-18 05:19:54,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 213 [2021-12-18 05:19:54,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-12-18 05:19:54,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 226 [2021-12-18 05:19:54,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-12-18 05:19:54,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 239 [2021-12-18 05:19:54,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-12-18 05:19:54,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 252 [2021-12-18 05:19:54,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-12-18 05:19:54,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2021-12-18 05:19:54,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-12-18 05:19:54,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 278 [2021-12-18 05:19:54,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-12-18 05:19:54,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:54,876 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 357 trivial. 0 not checked. [2021-12-18 05:19:54,876 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:19:54,876 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [82472771] [2021-12-18 05:19:54,876 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [82472771] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-18 05:19:54,877 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [301634750] [2021-12-18 05:19:54,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:19:54,877 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 05:19:54,877 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 05:19:54,883 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-18 05:19:54,917 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-18 05:19:55,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:55,836 INFO L263 TraceCheckSpWp]: Trace formula consists of 2899 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-18 05:19:55,858 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:19:56,438 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 357 trivial. 0 not checked. [2021-12-18 05:19:56,439 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:19:56,439 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [301634750] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:19:56,439 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-18 05:19:56,440 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-12-18 05:19:56,440 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [673417730] [2021-12-18 05:19:56,440 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:19:56,441 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 05:19:56,441 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:19:56,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 05:19:56,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2021-12-18 05:19:56,442 INFO L87 Difference]: Start difference. First operand 15167 states and 22598 transitions. Second operand has 5 states, 5 states have (on average 23.2) internal successors, (116), 5 states have internal predecessors, (116), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-12-18 05:19:57,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:19:57,631 INFO L93 Difference]: Finished difference Result 27665 states and 41264 transitions. [2021-12-18 05:19:57,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 05:19:57,632 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 5 states have internal predecessors, (116), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 296 [2021-12-18 05:19:57,632 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:19:57,722 INFO L225 Difference]: With dead ends: 27665 [2021-12-18 05:19:57,722 INFO L226 Difference]: Without dead ends: 21438 [2021-12-18 05:19:57,749 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 386 GetRequests, 372 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=196, Unknown=0, NotChecked=0, Total=240 [2021-12-18 05:19:57,749 INFO L933 BasicCegarLoop]: 4257 mSDtfsCounter, 2798 mSDsluCounter, 9951 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 239 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2820 SdHoareTripleChecker+Valid, 14208 SdHoareTripleChecker+Invalid, 391 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 239 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-18 05:19:57,750 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2820 Valid, 14208 Invalid, 391 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [239 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-18 05:19:57,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21438 states. [2021-12-18 05:19:58,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21438 to 15191. [2021-12-18 05:19:58,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15191 states, 10585 states have (on average 1.379782711384034) internal successors, (14605), 11209 states have internal predecessors, (14605), 3517 states have call successors, (3517), 834 states have call predecessors, (3517), 1088 states have return successors, (4512), 3483 states have call predecessors, (4512), 3515 states have call successors, (4512) [2021-12-18 05:19:58,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15191 states to 15191 states and 22634 transitions. [2021-12-18 05:19:58,476 INFO L78 Accepts]: Start accepts. Automaton has 15191 states and 22634 transitions. Word has length 296 [2021-12-18 05:19:58,476 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:19:58,476 INFO L470 AbstractCegarLoop]: Abstraction has 15191 states and 22634 transitions. [2021-12-18 05:19:58,476 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 5 states have internal predecessors, (116), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-12-18 05:19:58,477 INFO L276 IsEmpty]: Start isEmpty. Operand 15191 states and 22634 transitions. [2021-12-18 05:19:58,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 297 [2021-12-18 05:19:58,497 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:19:58,498 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:19:58,531 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-18 05:19:58,711 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-12-18 05:19:58,712 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:19:58,712 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:19:58,712 INFO L85 PathProgramCache]: Analyzing trace with hash -1903745264, now seen corresponding path program 1 times [2021-12-18 05:19:58,712 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:19:58,712 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [347993859] [2021-12-18 05:19:58,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:19:58,713 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:19:58,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:19:58,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:58,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:58,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:19:58,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:58,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:58,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:19:58,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:58,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:58,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:58,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:19:59,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:59,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:59,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:19:59,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:59,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-18 05:19:59,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:59,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-12-18 05:19:59,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:59,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:59,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-18 05:19:59,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:59,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:19:59,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-12-18 05:19:59,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-12-18 05:19:59,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-12-18 05:19:59,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-18 05:19:59,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-18 05:19:59,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:19:59,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-12-18 05:19:59,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 213 [2021-12-18 05:19:59,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-12-18 05:19:59,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 226 [2021-12-18 05:19:59,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-12-18 05:19:59,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 239 [2021-12-18 05:19:59,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-12-18 05:19:59,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 252 [2021-12-18 05:19:59,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-12-18 05:19:59,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2021-12-18 05:19:59,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-12-18 05:19:59,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 278 [2021-12-18 05:19:59,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-12-18 05:19:59,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:19:59,381 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 12 proven. 2 refuted. 0 times theorem prover too weak. 355 trivial. 0 not checked. [2021-12-18 05:19:59,381 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:19:59,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [347993859] [2021-12-18 05:19:59,381 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [347993859] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-18 05:19:59,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [847758223] [2021-12-18 05:19:59,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:19:59,382 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 05:19:59,382 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 05:19:59,383 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-18 05:19:59,394 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-18 05:20:00,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:00,368 INFO L263 TraceCheckSpWp]: Trace formula consists of 2894 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-18 05:20:00,374 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:20:00,820 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 121 proven. 0 refuted. 0 times theorem prover too weak. 248 trivial. 0 not checked. [2021-12-18 05:20:00,820 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:20:00,820 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [847758223] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:20:00,821 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-18 05:20:00,821 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2021-12-18 05:20:00,821 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [215504025] [2021-12-18 05:20:00,821 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:20:00,822 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 05:20:00,822 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:20:00,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 05:20:00,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-12-18 05:20:00,822 INFO L87 Difference]: Start difference. First operand 15191 states and 22634 transitions. Second operand has 6 states, 5 states have (on average 24.4) internal successors, (122), 6 states have internal predecessors, (122), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-12-18 05:20:01,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:20:01,562 INFO L93 Difference]: Finished difference Result 30393 states and 45316 transitions. [2021-12-18 05:20:01,563 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 05:20:01,563 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.4) internal successors, (122), 6 states have internal predecessors, (122), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) Word has length 296 [2021-12-18 05:20:01,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:20:01,624 INFO L225 Difference]: With dead ends: 30393 [2021-12-18 05:20:01,624 INFO L226 Difference]: Without dead ends: 15221 [2021-12-18 05:20:01,668 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 384 GetRequests, 369 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=231, Unknown=0, NotChecked=0, Total=272 [2021-12-18 05:20:01,669 INFO L933 BasicCegarLoop]: 2236 mSDtfsCounter, 6 mSDsluCounter, 8930 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11166 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 05:20:01,669 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11166 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 05:20:01,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15221 states. [2021-12-18 05:20:02,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15221 to 15194. [2021-12-18 05:20:02,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15194 states, 10587 states have (on average 1.379805421743648) internal successors, (14608), 11212 states have internal predecessors, (14608), 3517 states have call successors, (3517), 834 states have call predecessors, (3517), 1089 states have return successors, (4516), 3483 states have call predecessors, (4516), 3515 states have call successors, (4516) [2021-12-18 05:20:02,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15194 states to 15194 states and 22641 transitions. [2021-12-18 05:20:02,405 INFO L78 Accepts]: Start accepts. Automaton has 15194 states and 22641 transitions. Word has length 296 [2021-12-18 05:20:02,406 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:20:02,406 INFO L470 AbstractCegarLoop]: Abstraction has 15194 states and 22641 transitions. [2021-12-18 05:20:02,406 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.4) internal successors, (122), 6 states have internal predecessors, (122), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-12-18 05:20:02,406 INFO L276 IsEmpty]: Start isEmpty. Operand 15194 states and 22641 transitions. [2021-12-18 05:20:02,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 299 [2021-12-18 05:20:02,428 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:20:02,428 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:20:02,463 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-18 05:20:02,655 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2021-12-18 05:20:02,656 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:20:02,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:20:02,656 INFO L85 PathProgramCache]: Analyzing trace with hash -442570164, now seen corresponding path program 1 times [2021-12-18 05:20:02,656 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:20:02,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [132536633] [2021-12-18 05:20:02,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:20:02,657 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:20:02,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:20:02,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:02,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:02,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:20:02,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:02,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:02,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:20:02,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:02,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:02,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:20:02,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:02,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:02,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:20:02,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:02,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-18 05:20:02,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:02,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-12-18 05:20:02,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:02,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:02,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 131 [2021-12-18 05:20:02,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:02,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:02,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2021-12-18 05:20:02,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 165 [2021-12-18 05:20:02,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2021-12-18 05:20:02,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:02,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-18 05:20:02,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-18 05:20:03,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:03,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-12-18 05:20:03,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 215 [2021-12-18 05:20:03,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 219 [2021-12-18 05:20:03,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 228 [2021-12-18 05:20:03,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 232 [2021-12-18 05:20:03,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 241 [2021-12-18 05:20:03,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 245 [2021-12-18 05:20:03,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 254 [2021-12-18 05:20:03,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 258 [2021-12-18 05:20:03,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 267 [2021-12-18 05:20:03,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2021-12-18 05:20:03,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 280 [2021-12-18 05:20:03,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 284 [2021-12-18 05:20:03,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:03,219 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 12 proven. 2 refuted. 0 times theorem prover too weak. 360 trivial. 0 not checked. [2021-12-18 05:20:03,220 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:20:03,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [132536633] [2021-12-18 05:20:03,220 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [132536633] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-18 05:20:03,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [585770931] [2021-12-18 05:20:03,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:20:03,221 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 05:20:03,221 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 05:20:03,222 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-18 05:20:03,223 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-18 05:20:04,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:04,138 INFO L263 TraceCheckSpWp]: Trace formula consists of 2924 conjuncts, 12 conjunts are in the unsatisfiable core [2021-12-18 05:20:04,144 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:20:04,651 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 124 proven. 1 refuted. 0 times theorem prover too weak. 249 trivial. 0 not checked. [2021-12-18 05:20:04,651 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-18 05:20:05,340 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 363 trivial. 0 not checked. [2021-12-18 05:20:05,340 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [585770931] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-18 05:20:05,341 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-18 05:20:05,341 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 7, 7] total 20 [2021-12-18 05:20:05,341 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1052242807] [2021-12-18 05:20:05,341 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-18 05:20:05,342 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-12-18 05:20:05,342 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:20:05,342 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-12-18 05:20:05,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2021-12-18 05:20:05,343 INFO L87 Difference]: Start difference. First operand 15194 states and 22641 transitions. Second operand has 20 states, 18 states have (on average 11.333333333333334) internal successors, (204), 13 states have internal predecessors, (204), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-18 05:20:19,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:20:19,286 INFO L93 Difference]: Finished difference Result 32485 states and 49039 transitions. [2021-12-18 05:20:19,288 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-18 05:20:19,288 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 18 states have (on average 11.333333333333334) internal successors, (204), 13 states have internal predecessors, (204), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) Word has length 298 [2021-12-18 05:20:19,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:20:19,366 INFO L225 Difference]: With dead ends: 32485 [2021-12-18 05:20:19,367 INFO L226 Difference]: Without dead ends: 17310 [2021-12-18 05:20:19,410 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 697 GetRequests, 666 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=169, Invalid=887, Unknown=0, NotChecked=0, Total=1056 [2021-12-18 05:20:19,411 INFO L933 BasicCegarLoop]: 2033 mSDtfsCounter, 2480 mSDsluCounter, 12731 mSDsCounter, 0 mSdLazyCounter, 10059 mSolverCounterSat, 2196 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2629 SdHoareTripleChecker+Valid, 14764 SdHoareTripleChecker+Invalid, 12255 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2196 IncrementalHoareTripleChecker+Valid, 10059 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.6s IncrementalHoareTripleChecker+Time [2021-12-18 05:20:19,412 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2629 Valid, 14764 Invalid, 12255 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2196 Valid, 10059 Invalid, 0 Unknown, 0 Unchecked, 12.6s Time] [2021-12-18 05:20:19,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17310 states. [2021-12-18 05:20:20,198 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17310 to 15207. [2021-12-18 05:20:20,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15207 states, 10598 states have (on average 1.3795055670881298) internal successors, (14620), 11221 states have internal predecessors, (14620), 3517 states have call successors, (3517), 834 states have call predecessors, (3517), 1091 states have return successors, (4525), 3487 states have call predecessors, (4525), 3515 states have call successors, (4525) [2021-12-18 05:20:20,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15207 states to 15207 states and 22662 transitions. [2021-12-18 05:20:20,265 INFO L78 Accepts]: Start accepts. Automaton has 15207 states and 22662 transitions. Word has length 298 [2021-12-18 05:20:20,265 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:20:20,265 INFO L470 AbstractCegarLoop]: Abstraction has 15207 states and 22662 transitions. [2021-12-18 05:20:20,266 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 18 states have (on average 11.333333333333334) internal successors, (204), 13 states have internal predecessors, (204), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-12-18 05:20:20,266 INFO L276 IsEmpty]: Start isEmpty. Operand 15207 states and 22662 transitions. [2021-12-18 05:20:20,284 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 307 [2021-12-18 05:20:20,284 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:20:20,284 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:20:20,308 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-18 05:20:20,485 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 05:20:20,485 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:20:20,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:20:20,486 INFO L85 PathProgramCache]: Analyzing trace with hash -380056710, now seen corresponding path program 1 times [2021-12-18 05:20:20,486 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:20:20,486 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323540759] [2021-12-18 05:20:20,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:20:20,486 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:20:20,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:20:20,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:20,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:20,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:20:20,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:20,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:20,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:20:20,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:20,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:20,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:20:20,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:20,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:20,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:20:20,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:20,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-18 05:20:20,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:20,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-18 05:20:20,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:20,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:20,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-12-18 05:20:20,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:20,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:20,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-12-18 05:20:20,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:20:20,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-18 05:20:20,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-18 05:20:20,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-18 05:20:20,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-12-18 05:20:20,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:20,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-12-18 05:20:20,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:20,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 223 [2021-12-18 05:20:20,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-12-18 05:20:21,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-12-18 05:20:21,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-12-18 05:20:21,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2021-12-18 05:20:21,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-12-18 05:20:21,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 262 [2021-12-18 05:20:21,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-12-18 05:20:21,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 275 [2021-12-18 05:20:21,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-12-18 05:20:21,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 288 [2021-12-18 05:20:21,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-12-18 05:20:21,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:21,064 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 393 trivial. 0 not checked. [2021-12-18 05:20:21,064 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:20:21,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [323540759] [2021-12-18 05:20:21,064 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [323540759] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:20:21,064 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:20:21,064 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2021-12-18 05:20:21,065 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [450761424] [2021-12-18 05:20:21,065 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:20:21,066 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-18 05:20:21,066 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:20:21,066 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-18 05:20:21,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-12-18 05:20:21,067 INFO L87 Difference]: Start difference. First operand 15207 states and 22662 transitions. Second operand has 15 states, 14 states have (on average 8.571428571428571) internal successors, (120), 7 states have internal predecessors, (120), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-12-18 05:20:41,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:20:41,329 INFO L93 Difference]: Finished difference Result 22096 states and 33819 transitions. [2021-12-18 05:20:41,330 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-18 05:20:41,330 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 8.571428571428571) internal successors, (120), 7 states have internal predecessors, (120), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) Word has length 306 [2021-12-18 05:20:41,331 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:20:41,408 INFO L225 Difference]: With dead ends: 22096 [2021-12-18 05:20:41,408 INFO L226 Difference]: Without dead ends: 18558 [2021-12-18 05:20:41,429 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=124, Invalid=428, Unknown=0, NotChecked=0, Total=552 [2021-12-18 05:20:41,430 INFO L933 BasicCegarLoop]: 2642 mSDtfsCounter, 2826 mSDsluCounter, 19390 mSDsCounter, 0 mSdLazyCounter, 13099 mSolverCounterSat, 2193 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 17.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3122 SdHoareTripleChecker+Valid, 22032 SdHoareTripleChecker+Invalid, 15292 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2193 IncrementalHoareTripleChecker+Valid, 13099 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 18.9s IncrementalHoareTripleChecker+Time [2021-12-18 05:20:41,430 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3122 Valid, 22032 Invalid, 15292 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2193 Valid, 13099 Invalid, 0 Unknown, 0 Unchecked, 18.9s Time] [2021-12-18 05:20:41,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18558 states. [2021-12-18 05:20:42,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18558 to 15217. [2021-12-18 05:20:42,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15217 states, 10604 states have (on average 1.3792908336476801) internal successors, (14626), 11227 states have internal predecessors, (14626), 3519 states have call successors, (3519), 834 states have call predecessors, (3519), 1093 states have return successors, (4533), 3491 states have call predecessors, (4533), 3517 states have call successors, (4533) [2021-12-18 05:20:42,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15217 states to 15217 states and 22678 transitions. [2021-12-18 05:20:42,142 INFO L78 Accepts]: Start accepts. Automaton has 15217 states and 22678 transitions. Word has length 306 [2021-12-18 05:20:42,143 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:20:42,143 INFO L470 AbstractCegarLoop]: Abstraction has 15217 states and 22678 transitions. [2021-12-18 05:20:42,143 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 8.571428571428571) internal successors, (120), 7 states have internal predecessors, (120), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-12-18 05:20:42,143 INFO L276 IsEmpty]: Start isEmpty. Operand 15217 states and 22678 transitions. [2021-12-18 05:20:42,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 308 [2021-12-18 05:20:42,158 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:20:42,159 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:20:42,159 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-12-18 05:20:42,159 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:20:42,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:20:42,160 INFO L85 PathProgramCache]: Analyzing trace with hash 479316454, now seen corresponding path program 1 times [2021-12-18 05:20:42,160 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:20:42,160 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1433815539] [2021-12-18 05:20:42,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:20:42,160 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:20:42,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:20:42,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:42,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:42,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:20:42,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:42,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:42,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:20:42,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:42,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:42,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:20:42,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:42,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:42,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:20:42,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:42,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-18 05:20:42,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:42,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-18 05:20:42,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:42,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:42,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-12-18 05:20:42,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:42,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:20:42,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-12-18 05:20:42,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:20:42,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-12-18 05:20:42,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-12-18 05:20:42,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-18 05:20:42,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-12-18 05:20:42,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:20:42,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-12-18 05:20:42,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 223 [2021-12-18 05:20:42,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-12-18 05:20:42,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-12-18 05:20:42,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-12-18 05:20:42,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2021-12-18 05:20:42,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-12-18 05:20:42,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 262 [2021-12-18 05:20:42,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-12-18 05:20:42,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 275 [2021-12-18 05:20:42,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-12-18 05:20:42,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 288 [2021-12-18 05:20:42,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-12-18 05:20:42,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:42,744 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 389 trivial. 0 not checked. [2021-12-18 05:20:42,744 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:20:42,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1433815539] [2021-12-18 05:20:42,744 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1433815539] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-18 05:20:42,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1819480108] [2021-12-18 05:20:42,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:20:42,745 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 05:20:42,745 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 05:20:42,746 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-18 05:20:42,750 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-18 05:20:43,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:20:43,836 INFO L263 TraceCheckSpWp]: Trace formula consists of 2981 conjuncts, 19 conjunts are in the unsatisfiable core [2021-12-18 05:20:43,843 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:20:44,366 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 145 proven. 3 refuted. 0 times theorem prover too weak. 259 trivial. 0 not checked. [2021-12-18 05:20:44,367 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-18 05:20:45,192 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 389 trivial. 0 not checked. [2021-12-18 05:20:45,193 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1819480108] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-18 05:20:45,193 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-18 05:20:45,193 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 8] total 22 [2021-12-18 05:20:45,193 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [81643767] [2021-12-18 05:20:45,193 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-18 05:20:45,194 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-12-18 05:20:45,194 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:20:45,195 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-12-18 05:20:45,195 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2021-12-18 05:20:45,195 INFO L87 Difference]: Start difference. First operand 15217 states and 22678 transitions. Second operand has 22 states, 20 states have (on average 8.95) internal successors, (179), 16 states have internal predecessors, (179), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-12-18 05:21:10,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:21:10,364 INFO L93 Difference]: Finished difference Result 32530 states and 49168 transitions. [2021-12-18 05:21:10,367 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2021-12-18 05:21:10,367 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 20 states have (on average 8.95) internal successors, (179), 16 states have internal predecessors, (179), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 307 [2021-12-18 05:21:10,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:21:10,447 INFO L225 Difference]: With dead ends: 32530 [2021-12-18 05:21:10,447 INFO L226 Difference]: Without dead ends: 17332 [2021-12-18 05:21:10,507 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 718 GetRequests, 681 SyntacticMatches, 4 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 213 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=202, Invalid=988, Unknown=0, NotChecked=0, Total=1190 [2021-12-18 05:21:10,508 INFO L933 BasicCegarLoop]: 2021 mSDtfsCounter, 1918 mSDsluCounter, 17274 mSDsCounter, 0 mSdLazyCounter, 15252 mSolverCounterSat, 1638 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 21.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2066 SdHoareTripleChecker+Valid, 19295 SdHoareTripleChecker+Invalid, 16890 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1638 IncrementalHoareTripleChecker+Valid, 15252 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 23.6s IncrementalHoareTripleChecker+Time [2021-12-18 05:21:10,508 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2066 Valid, 19295 Invalid, 16890 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1638 Valid, 15252 Invalid, 0 Unknown, 0 Unchecked, 23.6s Time] [2021-12-18 05:21:10,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17332 states. [2021-12-18 05:21:11,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17332 to 15218. [2021-12-18 05:21:11,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15218 states, 10605 states have (on average 1.3793493635077794) internal successors, (14628), 11228 states have internal predecessors, (14628), 3519 states have call successors, (3519), 834 states have call predecessors, (3519), 1093 states have return successors, (4533), 3491 states have call predecessors, (4533), 3517 states have call successors, (4533) [2021-12-18 05:21:11,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15218 states to 15218 states and 22680 transitions. [2021-12-18 05:21:11,433 INFO L78 Accepts]: Start accepts. Automaton has 15218 states and 22680 transitions. Word has length 307 [2021-12-18 05:21:11,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:21:11,433 INFO L470 AbstractCegarLoop]: Abstraction has 15218 states and 22680 transitions. [2021-12-18 05:21:11,434 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 20 states have (on average 8.95) internal successors, (179), 16 states have internal predecessors, (179), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-12-18 05:21:11,434 INFO L276 IsEmpty]: Start isEmpty. Operand 15218 states and 22680 transitions. [2021-12-18 05:21:11,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 310 [2021-12-18 05:21:11,451 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:21:11,451 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:21:11,477 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-12-18 05:21:11,655 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2021-12-18 05:21:11,656 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:21:11,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:21:11,656 INFO L85 PathProgramCache]: Analyzing trace with hash -590493142, now seen corresponding path program 2 times [2021-12-18 05:21:11,656 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:21:11,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379931045] [2021-12-18 05:21:11,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:21:11,656 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:21:11,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:21:11,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:21:11,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:21:11,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-18 05:21:11,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:21:11,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:21:11,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-18 05:21:11,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:21:11,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:21:11,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-18 05:21:11,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:21:11,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:21:11,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-18 05:21:11,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:11,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:21:11,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-18 05:21:12,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:21:12,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-18 05:21:12,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:21:12,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:21:12,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-18 05:21:12,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:21:12,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-12-18 05:21:12,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-18 05:21:12,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-18 05:21:12,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-18 05:21:12,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-18 05:21:12,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 185 [2021-12-18 05:21:12,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2021-12-18 05:21:12,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-18 05:21:12,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 201 [2021-12-18 05:21:12,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 225 [2021-12-18 05:21:12,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 229 [2021-12-18 05:21:12,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 238 [2021-12-18 05:21:12,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 242 [2021-12-18 05:21:12,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 251 [2021-12-18 05:21:12,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 255 [2021-12-18 05:21:12,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 264 [2021-12-18 05:21:12,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 268 [2021-12-18 05:21:12,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 277 [2021-12-18 05:21:12,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 281 [2021-12-18 05:21:12,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 290 [2021-12-18 05:21:12,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 294 [2021-12-18 05:21:12,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:21:12,274 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-18 05:21:12,274 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-18 05:21:12,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379931045] [2021-12-18 05:21:12,275 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379931045] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-18 05:21:12,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1966181571] [2021-12-18 05:21:12,275 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-18 05:21:12,275 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 05:21:12,276 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 05:21:12,277 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-18 05:21:12,311 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-12-18 05:21:13,867 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-12-18 05:21:13,867 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-18 05:21:13,883 INFO L263 TraceCheckSpWp]: Trace formula consists of 3011 conjuncts, 21 conjunts are in the unsatisfiable core [2021-12-18 05:21:13,889 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:21:14,456 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 149 proven. 6 refuted. 0 times theorem prover too weak. 265 trivial. 0 not checked. [2021-12-18 05:21:14,456 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-18 05:21:15,245 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 22 proven. 6 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-12-18 05:21:15,246 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1966181571] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-18 05:21:15,246 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-18 05:21:15,246 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9, 9] total 24 [2021-12-18 05:21:15,247 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1864532748] [2021-12-18 05:21:15,247 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-18 05:21:15,250 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-12-18 05:21:15,250 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-18 05:21:15,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-12-18 05:21:15,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=481, Unknown=0, NotChecked=0, Total=552 [2021-12-18 05:21:15,251 INFO L87 Difference]: Start difference. First operand 15218 states and 22680 transitions. Second operand has 24 states, 22 states have (on average 7.954545454545454) internal successors, (175), 18 states have internal predecessors, (175), 4 states have call successors, (79), 8 states have call predecessors, (79), 6 states have return successors, (62), 4 states have call predecessors, (62), 4 states have call successors, (62) [2021-12-18 05:21:36,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:21:36,882 INFO L93 Difference]: Finished difference Result 32561 states and 49280 transitions. [2021-12-18 05:21:36,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-18 05:21:36,885 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 22 states have (on average 7.954545454545454) internal successors, (175), 18 states have internal predecessors, (175), 4 states have call successors, (79), 8 states have call predecessors, (79), 6 states have return successors, (62), 4 states have call predecessors, (62), 4 states have call successors, (62) Word has length 309 [2021-12-18 05:21:36,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:21:36,956 INFO L225 Difference]: With dead ends: 32561 [2021-12-18 05:21:36,956 INFO L226 Difference]: Without dead ends: 17362 [2021-12-18 05:21:36,995 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 725 GetRequests, 682 SyntacticMatches, 6 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 267 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=237, Invalid=1245, Unknown=0, NotChecked=0, Total=1482 [2021-12-18 05:21:36,996 INFO L933 BasicCegarLoop]: 2034 mSDtfsCounter, 2486 mSDsluCounter, 17145 mSDsCounter, 0 mSdLazyCounter, 14378 mSolverCounterSat, 2223 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 17.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2634 SdHoareTripleChecker+Valid, 19179 SdHoareTripleChecker+Invalid, 16601 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.2s SdHoareTripleChecker+Time, 2223 IncrementalHoareTripleChecker+Valid, 14378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.0s IncrementalHoareTripleChecker+Time [2021-12-18 05:21:36,996 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2634 Valid, 19179 Invalid, 16601 Unknown, 0 Unchecked, 0.2s Time], IncrementalHoareTripleChecker [2223 Valid, 14378 Invalid, 0 Unknown, 0 Unchecked, 20.0s Time] [2021-12-18 05:21:37,008 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17362 states. [2021-12-18 05:21:37,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17362 to 15219. [2021-12-18 05:21:37,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15219 states, 10606 states have (on average 1.3794078823307563) internal successors, (14630), 11229 states have internal predecessors, (14630), 3519 states have call successors, (3519), 834 states have call predecessors, (3519), 1093 states have return successors, (4533), 3491 states have call predecessors, (4533), 3517 states have call successors, (4533) [2021-12-18 05:21:37,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15219 states to 15219 states and 22682 transitions. [2021-12-18 05:21:37,738 INFO L78 Accepts]: Start accepts. Automaton has 15219 states and 22682 transitions. Word has length 309 [2021-12-18 05:21:37,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:21:37,739 INFO L470 AbstractCegarLoop]: Abstraction has 15219 states and 22682 transitions. [2021-12-18 05:21:37,739 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 22 states have (on average 7.954545454545454) internal successors, (175), 18 states have internal predecessors, (175), 4 states have call successors, (79), 8 states have call predecessors, (79), 6 states have return successors, (62), 4 states have call predecessors, (62), 4 states have call successors, (62) [2021-12-18 05:21:37,739 INFO L276 IsEmpty]: Start isEmpty. Operand 15219 states and 22682 transitions. [2021-12-18 05:21:37,755 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-12-18 05:21:37,755 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:21:37,755 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:21:37,781 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-12-18 05:21:37,955 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-18 05:21:37,956 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:21:37,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:21:37,957 INFO L85 PathProgramCache]: Analyzing trace with hash -549788826, now seen corresponding path program 3 times [2021-12-18 05:21:37,957 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-18 05:21:37,957 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1508649003] [2021-12-18 05:21:37,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:21:37,957 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-18 05:21:38,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 05:21:38,858 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-18 05:21:39,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 05:21:39,691 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-18 05:21:39,693 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-18 05:21:39,694 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-18 05:21:39,695 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-12-18 05:21:39,698 INFO L732 BasicCegarLoop]: Path program histogram: [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:21:39,702 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-18 05:21:39,783 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-18 05:21:39,788 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-18 05:21:40,250 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.12 05:21:40 BoogieIcfgContainer [2021-12-18 05:21:40,251 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-18 05:21:40,252 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-18 05:21:40,252 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-18 05:21:40,252 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-18 05:21:40,253 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 05:17:27" (3/4) ... [2021-12-18 05:21:40,256 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-18 05:21:40,256 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-18 05:21:40,256 INFO L158 Benchmark]: Toolchain (without parser) took 260310.69ms. Allocated memory was 100.7MB in the beginning and 3.3GB in the end (delta: 3.2GB). Free memory was 59.9MB in the beginning and 1.9GB in the end (delta: -1.9GB). Peak memory consumption was 1.4GB. Max. memory is 16.1GB. [2021-12-18 05:21:40,260 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 100.7MB. Free memory was 58.0MB in the beginning and 58.0MB in the end (delta: 43.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 05:21:40,260 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2028.92ms. Allocated memory was 100.7MB in the beginning and 123.7MB in the end (delta: 23.1MB). Free memory was 59.5MB in the beginning and 42.6MB in the end (delta: 16.9MB). Peak memory consumption was 54.7MB. Max. memory is 16.1GB. [2021-12-18 05:21:40,260 INFO L158 Benchmark]: Boogie Procedure Inliner took 252.61ms. Allocated memory was 123.7MB in the beginning and 192.9MB in the end (delta: 69.2MB). Free memory was 42.6MB in the beginning and 114.1MB in the end (delta: -71.5MB). Peak memory consumption was 9.5MB. Max. memory is 16.1GB. [2021-12-18 05:21:40,260 INFO L158 Benchmark]: Boogie Preprocessor took 256.65ms. Allocated memory is still 192.9MB. Free memory was 114.1MB in the beginning and 118.0MB in the end (delta: -3.9MB). Peak memory consumption was 49.6MB. Max. memory is 16.1GB. [2021-12-18 05:21:40,261 INFO L158 Benchmark]: RCFGBuilder took 5018.93ms. Allocated memory was 192.9MB in the beginning and 289.4MB in the end (delta: 96.5MB). Free memory was 118.0MB in the beginning and 157.4MB in the end (delta: -39.3MB). Peak memory consumption was 113.6MB. Max. memory is 16.1GB. [2021-12-18 05:21:40,261 INFO L158 Benchmark]: TraceAbstraction took 252741.78ms. Allocated memory was 289.4MB in the beginning and 3.3GB in the end (delta: 3.1GB). Free memory was 156.3MB in the beginning and 1.9GB in the end (delta: -1.8GB). Peak memory consumption was 1.3GB. Max. memory is 16.1GB. [2021-12-18 05:21:40,263 INFO L158 Benchmark]: Witness Printer took 4.20ms. Allocated memory is still 3.3GB. Free memory is still 1.9GB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 05:21:40,266 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 100.7MB. Free memory was 58.0MB in the beginning and 58.0MB in the end (delta: 43.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2028.92ms. Allocated memory was 100.7MB in the beginning and 123.7MB in the end (delta: 23.1MB). Free memory was 59.5MB in the beginning and 42.6MB in the end (delta: 16.9MB). Peak memory consumption was 54.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 252.61ms. Allocated memory was 123.7MB in the beginning and 192.9MB in the end (delta: 69.2MB). Free memory was 42.6MB in the beginning and 114.1MB in the end (delta: -71.5MB). Peak memory consumption was 9.5MB. Max. memory is 16.1GB. * Boogie Preprocessor took 256.65ms. Allocated memory is still 192.9MB. Free memory was 114.1MB in the beginning and 118.0MB in the end (delta: -3.9MB). Peak memory consumption was 49.6MB. Max. memory is 16.1GB. * RCFGBuilder took 5018.93ms. Allocated memory was 192.9MB in the beginning and 289.4MB in the end (delta: 96.5MB). Free memory was 118.0MB in the beginning and 157.4MB in the end (delta: -39.3MB). Peak memory consumption was 113.6MB. Max. memory is 16.1GB. * TraceAbstraction took 252741.78ms. Allocated memory was 289.4MB in the beginning and 3.3GB in the end (delta: 3.1GB). Free memory was 156.3MB in the beginning and 1.9GB in the end (delta: -1.8GB). Peak memory consumption was 1.3GB. Max. memory is 16.1GB. * Witness Printer took 4.20ms. Allocated memory is still 3.3GB. Free memory is still 1.9GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8151]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6893. Possible FailurePath: [L4340] int ldv_timer_state_5 = 0; [L4341] struct timer_list *ldv_timer_list_5 ; [L4342] struct timer_list *ldv_timer_list_4 ; [L4343] struct work_struct *ldv_work_struct_3_1 ; [L4344] struct mmc_host *vub300_mmc_ops_group0 ; [L4345] struct work_struct *ldv_work_struct_1_3 ; [L4346] int ldv_state_variable_0 ; [L4347] int ldv_state_variable_5 ; [L4348] int ldv_work_1_1 ; [L4349] int ldv_work_3_2 ; [L4350] int ldv_work_3_0 ; [L4351] struct work_struct *ldv_work_struct_2_3 ; [L4352] struct work_struct *ldv_work_struct_2_0 ; [L4353] struct work_struct *ldv_work_struct_2_2 ; [L4354] int ldv_timer_state_4 = 0; [L4355] int ref_cnt ; [L4356] int ldv_work_3_3 ; [L4357] int ldv_state_variable_1 ; [L4358] int ldv_state_variable_7 ; [L4359] struct work_struct *ldv_work_struct_3_3 ; [L4360] struct work_struct *ldv_work_struct_1_0 ; [L4361] struct work_struct *ldv_work_struct_1_1 ; [L4362] int ldv_work_1_3 ; [L4363] struct work_struct *ldv_work_struct_2_1 ; [L4364] struct work_struct *ldv_work_struct_3_2 ; [L4365] int ldv_state_variable_6 ; [L4366] int ldv_work_3_1 ; [L4367] int ldv_state_variable_2 ; [L4368] int ldv_work_2_0 ; [L4369] int usb_counter ; [L4370] struct work_struct *ldv_work_struct_3_0 ; [L4371] int ldv_work_1_2 ; [L4372] int LDV_IN_INTERRUPT = 1; [L4373] struct work_struct *ldv_work_struct_1_2 ; [L4374] int ldv_work_2_2 ; [L4375] int ldv_state_variable_3 ; [L4376] struct usb_interface *vub300_driver_group1 ; [L4377] int ldv_work_1_0 ; [L4378] int ldv_work_2_3 ; [L4379] int ldv_state_variable_4 ; [L4380] int ldv_work_2_1 ; [L4437] static bool limit_speed_to_24_MHz ; [L4438] static bool pad_input_to_usb_pkt ; [L4439] static bool disable_offload_processing ; [L4440] static bool force_1_bit_data_xfers ; [L4441] static bool force_polling_for_irqs ; [L4442] static int firmware_irqpoll_timeout = 1024; [L4443] static int force_max_req_size = 128; [L4444] static int firmware_rom_wait_states = 28; [L4445-L4450] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4451] struct usb_device_id const __mod_usb_device_table ; [L4452] static struct workqueue_struct *cmndworkqueue ; [L4453] static struct workqueue_struct *pollworkqueue ; [L4454] static struct workqueue_struct *deadworkqueue ; [L6440-L6442] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6853-L6859] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6932] int ldv_retval_0 ; [L6933] int ldv_retval_1 ; [L6937] int ldv_retval_3 ; [L6938] int ldv_retval_2 ; [L8154] int URB_STATE = 0; [L8155] int DEV_STATE = 0; [L8156] int INTERF_STATE = 0; [L8157] int SERIAL_STATE = 0; [L8158] void *usb_intfdata = (void *)0; [L8159] struct urb *int_urb = (struct urb *)0; [L8160] struct urb *bulk_urb = (struct urb *)0; [L8161] void (*completeFnInt)(struct urb * ) ; [L8162] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7530] struct usb_device_id *ldvarg1 ; [L7531] void *tmp ; [L7532] pm_message_t ldvarg0 ; [L7533] struct mmc_card *ldvarg4 ; [L7534] void *tmp___0 ; [L7535] struct mmc_ios *ldvarg3 ; [L7536] void *tmp___1 ; [L7537] int ldvarg5 ; [L7538] struct mmc_request *ldvarg2 ; [L7539] void *tmp___2 ; [L7540] int tmp___3 ; [L7541] int tmp___4 ; [L7542] int tmp___5 ; [L7543] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103231:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103231:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103231:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103231:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103231:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={-36893488147419103231:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103231:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103231:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={-36893488147419103231:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] tmp = ldv_init_zalloc(32UL) [L7546] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] CALL, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1824, \result={-36893488147419103233:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] RET, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1824UL)={-36893488147419103233:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] tmp___0 = ldv_init_zalloc(1824UL) [L7548] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={-55340232221128654849:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={-55340232221128654849:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] tmp___1 = ldv_init_zalloc(16UL) [L7550] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] tmp___2 = ldv_init_zalloc(136UL) [L7552] ldvarg2 = (struct mmc_request *)tmp___2 [L7553] FCALL ldv_initialize() [L7554] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={90:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={90:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, tmp={90:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7554] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={90:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7555] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={91:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={91:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, tmp={91:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7555] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={91:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7556] ldv_state_variable_6 = 0 [L7557] CALL work_init_3() [L6942] ldv_work_3_0 = 0 [L6943] ldv_work_3_1 = 0 [L6944] ldv_work_3_2 = 0 [L6945] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7557] RET work_init_3() [L7558] ldv_state_variable_3 = 1 [L7559] ldv_state_variable_7 = 0 [L7560] CALL work_init_2() [L6992] ldv_work_2_0 = 0 [L6993] ldv_work_2_1 = 0 [L6994] ldv_work_2_2 = 0 [L6995] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7560] RET work_init_2() [L7561] ldv_state_variable_2 = 1 [L7562] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7562] RET work_init_1() [L7563] ldv_state_variable_1 = 1 [L7564] ldv_state_variable_4 = 1 [L7565] ref_cnt = 0 [L7566] ldv_state_variable_0 = 1 [L7567] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, tmp___3=6, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: [L7716] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7717] COND TRUE ldv_state_variable_0 == 1 [L7718] CALL, EXPR vub300_init() [L6862] int result ; [L6863] struct lock_class_key __key ; [L6864] char const *__lock_name ; [L6865] struct workqueue_struct *tmp ; [L6866] struct lock_class_key __key___0 ; [L6867] char const *__lock_name___0 ; [L6868] struct workqueue_struct *tmp___0 ; [L6869] struct lock_class_key __key___1 ; [L6870] char const *__lock_name___1 ; [L6871] struct workqueue_struct *tmp___1 ; [L6875] __lock_name = "kvub300c" [L6876] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6877] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __key={94:0}, __key___0={95:0}, __key___1={93:0}, __lock_name={74:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6878] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] __lock_name___0 = "kvub300p" [L6885] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6886] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={94:0}, __key___0={95:0}, __key___1={93:0}, __lock_name={74:0}, __lock_name___0={77:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6887] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6893] __lock_name___1 = "kvub300d" [L6894] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6895] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={-100:101}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={94:0}, __key___0={95:0}, __key___1={93:0}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={-100:101}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6896] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6902] CALL, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L8056] ldv_func_ret_type___13 ldv_func_res ; [L8057] int tmp ; [L8059] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8538] return __VERIFIER_nondet_int(); [L8059] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8059] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8060] ldv_func_res = tmp [L8061] ldv_state_variable_6 = 1 [L8062] usb_counter = 0 [L8063] CALL ldv_usb_driver_6() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={-110680464442257309697:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={-110680464442257309697:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L8063] RET ldv_usb_driver_6() [L8064] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={87:0}, ldv_func_arg1={87:0}, ldv_func_arg2={8706:8707}, ldv_func_arg2={8706:8707}, ldv_func_arg3={83:0}, ldv_func_arg3={83:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6902] RET, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6902] result = ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6903] COND FALSE !(result != 0) [L6908] return (0); [L6908] return (0); [L6908] return (0); [L6908] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={-100:101}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={-100:101}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7718] RET, EXPR vub300_init() [L7718] ldv_retval_3 = vub300_init() [L7719] COND TRUE ldv_retval_3 == 0 [L7720] ldv_state_variable_0 = 3 [L7721] ldv_state_variable_7 = 1 [L7722] CALL ldv_initialize_mmc_host_ops_7() [L7001] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={-73786976294838206465:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={-73786976294838206465:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] tmp = ldv_init_zalloc(2624UL) [L7004] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7722] RET ldv_initialize_mmc_host_ops_7() [L7725] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, tmp___3=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7572] COND TRUE ldv_state_variable_6 != 0 [L7573] tmp___4 = __VERIFIER_nondet_int() [L7575] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7576] COND TRUE ldv_state_variable_6 == 1 [L7577] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6445] struct vub300_mmc_host *vub300 ; [L6446] struct usb_host_interface *iface_desc ; [L6447] struct usb_device *udev ; [L6448] struct usb_device *tmp ; [L6449] struct usb_device *tmp___0 ; [L6450] int i ; [L6451] int retval ; [L6452] struct urb *command_out_urb ; [L6453] struct urb *command_res_urb ; [L6454] struct mmc_host *mmc ; [L6455] char manufacturer[48U] ; [L6456] char product[32U] ; [L6457] char serial_number[32U] ; [L6458] void *tmp___1 ; [L6459] struct lock_class_key __key ; [L6460] struct lock_class_key __key___0 ; [L6461] int tmp___2 ; [L6462] struct usb_endpoint_descriptor *endpoint ; [L6463] int tmp___4 ; [L6464] char *tmp___5 ; [L6465] int tmp___6 ; [L6466] int tmp___7 ; [L6467] int tmp___8 ; [L6468] unsigned int tmp___9 ; [L6469] unsigned int tmp___10 ; [L6470] unsigned int tmp___11 ; [L6471] struct lock_class_key __key___1 ; [L6472] atomic_long_t __constr_expr_0 ; [L6473] struct lock_class_key __key___2 ; [L6474] struct lock_class_key __key___3 ; [L6475] atomic_long_t __constr_expr_1 ; [L6476] struct lock_class_key __key___4 ; [L6477] atomic_long_t __constr_expr_2 ; [L6478] int tmp___12 ; [L6479] int tmp___13 ; [L6481] CALL, EXPR interface_to_usbdev(interface) [L7799] struct usb_device *tmp ; [L7801] CALL, EXPR ldv_interface_to_usbdev() [L8277] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8282] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND FALSE !(tmp___0 != 0) [L4268] tmp = malloc(size) [L4269] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={-92233720368547758081:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L4270] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L4270] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={-92233720368547758081:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L4271] return (p); VAL [={0:0}, ={0:0}, \old(size)=1672, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={-92233720368547758081:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8282] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-92233720368547758081:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8282] result = ldv_malloc(sizeof(struct usb_device)) [L8283] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8287] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result={-92233720368547758081:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7801] RET, EXPR ldv_interface_to_usbdev() [L7801] tmp = ldv_interface_to_usbdev() [L7802] return (tmp); VAL [={0:0}, ={0:0}, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={-110680464442257309697:0}, intf={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6481] RET, EXPR interface_to_usbdev(interface) [L6481] tmp = interface_to_usbdev(interface) [L6482] CALL, EXPR ldv_usb_get_dev_44(tmp) [L7996] CALL ldv_get_dev(ldv_func_arg1) [L8293] DEV_STATE = DEV_STATE + 1 [L8294] return (data); VAL [={0:0}, ={0:0}, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, data={-92233720368547758081:0}, data={-92233720368547758081:0}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7996] RET ldv_get_dev(ldv_func_arg1) [L7997] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-92233720368547758081:0}, ldv_func_arg1={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6482] RET, EXPR ldv_usb_get_dev_44(tmp) [L6482] tmp___0 = ldv_usb_get_dev_44(tmp) [L6483] udev = tmp___0 [L6484] retval = -12 [L6485] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={113:0}, __constr_expr_1={109:0}, __constr_expr_2={122:0}, __key={123:0}, __key___0={103:0}, __key___1={107:0}, __key___2={111:0}, __key___3={102:0}, __key___4={106:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103231:0}, id={-36893488147419103231:0}, int_urb={0:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={121:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={89:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6485-L6486] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=125, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0={0:0}, arg2={121:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6485-L6486] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={113:0}, __constr_expr_1={109:0}, __constr_expr_2={122:0}, __key={123:0}, __key___0={103:0}, __key___1={107:0}, __key___2={111:0}, __key___3={102:0}, __key___4={106:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103231:0}, id={-36893488147419103231:0}, int_urb={0:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={121:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={89:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=0, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6487] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={113:0}, __constr_expr_1={109:0}, __constr_expr_2={122:0}, __key={123:0}, __key___0={103:0}, __key___1={107:0}, __key___2={111:0}, __key___3={102:0}, __key___4={106:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103231:0}, id={-36893488147419103231:0}, int_urb={0:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={121:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={89:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=126, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6487] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=126, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0={0:0}, arg2={89:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6487] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={113:0}, __constr_expr_1={109:0}, __constr_expr_2={122:0}, __key={123:0}, __key___0={103:0}, __key___1={107:0}, __key___2={111:0}, __key___3={102:0}, __key___4={106:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103231:0}, id={-36893488147419103231:0}, int_urb={0:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={121:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={89:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=126, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=0, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6488] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={113:0}, __constr_expr_1={109:0}, __constr_expr_2={122:0}, __key={123:0}, __key___0={103:0}, __key___1={107:0}, __key___2={111:0}, __key___3={102:0}, __key___4={106:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103231:0}, id={-36893488147419103231:0}, int_urb={0:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={121:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={89:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=127, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6488-L6489] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=127, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0={0:0}, arg2={114:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6488-L6489] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={113:0}, __constr_expr_1={109:0}, __constr_expr_2={122:0}, __key={123:0}, __key___0={103:0}, __key___1={107:0}, __key___2={111:0}, __key___3={102:0}, __key___4={106:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103231:0}, id={-36893488147419103231:0}, int_urb={0:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={121:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={89:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=127, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=0, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6491] udev->descriptor.idVendor [L6491] udev->descriptor.idProduct [L6493] CALL, EXPR ldv_usb_alloc_urb_45(0, 208U) [L8002] ldv_func_ret_type___11 ldv_func_res ; [L8003] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8005] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8514] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND TRUE tmp___0 != 0 [L4266] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=-2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8514] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0=0, arg1=208, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8514] return ldv_malloc(sizeof(struct urb)); [L8005] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8005] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8006] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8007] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8186] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8007] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8008] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6493] RET, EXPR ldv_usb_alloc_urb_45(0, 208U) [L6493] command_out_urb = ldv_usb_alloc_urb_45(0, 208U) [L6494] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6495] retval = -12 [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, command_out_urb={0:0}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103231:0}, id={-36893488147419103231:0}, int_urb={0:0}, INTERF_STATE=0, interface={-110680464442257309697:0}, interface={-110680464442257309697:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, retval=-12, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7577] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7577] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7578] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, tmp___3=6, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7709] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7710] CALL vub300_exit() [L6922] CALL ldv_usb_deregister_61(& vub300_driver) [L8094] FCALL usb_deregister(arg) [L8095] ldv_state_variable_6 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg={87:0}, arg={87:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6922] RET ldv_usb_deregister_61(& vub300_driver) [L6923] CALL ldv_flush_workqueue_62(cmndworkqueue) [L8102] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8103] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8103] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6923] RET ldv_flush_workqueue_62(cmndworkqueue) [L6924] CALL ldv_flush_workqueue_63(pollworkqueue) [L8110] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8111] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8111] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6924] RET ldv_flush_workqueue_63(pollworkqueue) [L6925] CALL ldv_flush_workqueue_64(deadworkqueue) [L8118] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-100:101}, ldv_func_arg1={-100:101}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8119] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8119] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-100:101}, ldv_func_arg1={-100:101}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6925] RET ldv_flush_workqueue_64(deadworkqueue) [L6926] CALL ldv_destroy_workqueue_65(cmndworkqueue) [L8126] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8127] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8127] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6926] RET ldv_destroy_workqueue_65(cmndworkqueue) [L6927] CALL ldv_destroy_workqueue_66(pollworkqueue) [L8134] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8135] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8135] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6927] RET ldv_destroy_workqueue_66(pollworkqueue) [L6928] CALL ldv_destroy_workqueue_67(deadworkqueue) [L8142] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-100:101}, ldv_func_arg1={-100:101}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8143] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8143] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-100:101}, ldv_func_arg1={-100:101}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L6928] RET ldv_destroy_workqueue_67(deadworkqueue) [L7710] RET vub300_exit() [L7711] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103231:0}, ldvarg2={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={91:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103231:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-18446744073709551617:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L7752] CALL ldv_check_final_state() [L8355] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8359] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8360] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] [L8151] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={-100:101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={-110680464442257309697:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={85:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1582 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 252.1s, OverallIterations: 20, TraceHistogramMax: 8, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.5s, AutomataDifference: 216.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 76422 SdHoareTripleChecker+Valid, 197.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 72646 mSDsluCounter, 179729 SdHoareTripleChecker+Invalid, 177.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 135734 mSDsCounter, 53152 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 110949 IncrementalHoareTripleChecker+Invalid, 164101 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 53152 mSolverCounterUnsat, 43995 mSDtfsCounter, 110949 mSolverCounterSat, 0.9s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 3926 GetRequests, 3592 SyntacticMatches, 10 SemanticMatches, 324 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1309 ImplicationChecksByTransitivity, 4.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=24607occurred in iteration=8, InterpolantAutomatonStates: 231, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 13.0s AutomataMinimizationTime, 19 MinimizatonAttempts, 37592 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.7s SsaConstructionTime, 4.3s SatisfiabilityAnalysisTime, 12.4s InterpolantComputationTime, 6164 NumberOfCodeBlocks, 6164 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 6740 ConstructedInterpolants, 0 QuantifiedInterpolants, 12694 SizeOfPredicates, 11 NumberOfNonLiveVariables, 14709 ConjunctsInSsa, 65 ConjunctsInUnsatCore, 27 InterpolantComputations, 16 PerfectInterpolantSequences, 7051/7158 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-18 05:21:40,506 WARN L435 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-12-18 05:21:40,535 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-18 05:21:42,370 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-18 05:21:42,372 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-18 05:21:42,404 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-18 05:21:42,404 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-18 05:21:42,405 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-18 05:21:42,406 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-18 05:21:42,408 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-18 05:21:42,409 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-18 05:21:42,413 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-18 05:21:42,414 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-18 05:21:42,415 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-18 05:21:42,415 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-18 05:21:42,416 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-18 05:21:42,417 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-18 05:21:42,418 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-18 05:21:42,418 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-18 05:21:42,419 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-18 05:21:42,421 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-18 05:21:42,422 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-18 05:21:42,426 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-18 05:21:42,427 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-18 05:21:42,429 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-18 05:21:42,432 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-18 05:21:42,436 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-18 05:21:42,437 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-18 05:21:42,437 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-18 05:21:42,438 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-18 05:21:42,438 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-18 05:21:42,439 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-18 05:21:42,439 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-18 05:21:42,440 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-18 05:21:42,440 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-18 05:21:42,441 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-18 05:21:42,442 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-18 05:21:42,442 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-18 05:21:42,443 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-18 05:21:42,443 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-18 05:21:42,443 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-18 05:21:42,444 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-18 05:21:42,445 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-18 05:21:42,446 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-18 05:21:42,465 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-18 05:21:42,465 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-18 05:21:42,465 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-18 05:21:42,466 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-18 05:21:42,466 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-18 05:21:42,466 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-18 05:21:42,467 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-18 05:21:42,467 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-18 05:21:42,467 INFO L138 SettingsManager]: * Use SBE=true [2021-12-18 05:21:42,468 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-18 05:21:42,468 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-18 05:21:42,468 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-18 05:21:42,468 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-18 05:21:42,468 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-18 05:21:42,469 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-18 05:21:42,469 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-18 05:21:42,469 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-18 05:21:42,469 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-18 05:21:42,469 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-18 05:21:42,470 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-18 05:21:42,470 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-18 05:21:42,470 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-18 05:21:42,470 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-18 05:21:42,470 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 05:21:42,471 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-18 05:21:42,471 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-18 05:21:42,471 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-18 05:21:42,471 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-18 05:21:42,471 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-18 05:21:42,472 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-18 05:21:42,472 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-18 05:21:42,472 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-18 05:21:42,472 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-18 05:21:42,472 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-18 05:21:42,473 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 [2021-12-18 05:21:42,788 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-18 05:21:42,810 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-18 05:21:42,813 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-18 05:21:42,813 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-18 05:21:42,814 INFO L275 PluginConnector]: CDTParser initialized [2021-12-18 05:21:42,815 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-18 05:21:42,880 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ed127e67f/9f18bd0d263e4ffc9ba1d3ae74c854aa/FLAG7f4fe29f7 [2021-12-18 05:21:43,689 INFO L306 CDTParser]: Found 1 translation units. [2021-12-18 05:21:43,690 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-18 05:21:43,738 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ed127e67f/9f18bd0d263e4ffc9ba1d3ae74c854aa/FLAG7f4fe29f7 [2021-12-18 05:21:43,863 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ed127e67f/9f18bd0d263e4ffc9ba1d3ae74c854aa [2021-12-18 05:21:43,865 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-18 05:21:43,867 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-18 05:21:43,870 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-18 05:21:43,870 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-18 05:21:43,873 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-18 05:21:43,874 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 05:21:43" (1/1) ... [2021-12-18 05:21:43,875 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@735fc56b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:43, skipping insertion in model container [2021-12-18 05:21:43,875 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.12 05:21:43" (1/1) ... [2021-12-18 05:21:43,881 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-18 05:21:43,996 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-18 05:21:45,347 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-18 05:21:45,404 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 05:21:45,436 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-18 05:21:45,493 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-18 05:21:45,821 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-18 05:21:45,838 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 05:21:45,880 INFO L203 MainTranslator]: Completed pre-run [2021-12-18 05:21:46,181 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-12-18 05:21:46,188 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-18 05:21:46,290 INFO L208 MainTranslator]: Completed translation [2021-12-18 05:21:46,290 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46 WrapperNode [2021-12-18 05:21:46,290 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-18 05:21:46,291 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-18 05:21:46,292 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-18 05:21:46,292 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-18 05:21:46,297 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,372 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,513 INFO L137 Inliner]: procedures = 276, calls = 1811, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4398 [2021-12-18 05:21:46,514 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-18 05:21:46,514 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-18 05:21:46,515 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-18 05:21:46,515 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-18 05:21:46,524 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,524 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,558 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,559 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,701 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,726 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,760 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,789 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-18 05:21:46,791 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-18 05:21:46,791 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-18 05:21:46,791 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-18 05:21:46,792 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (1/1) ... [2021-12-18 05:21:46,798 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-18 05:21:46,807 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-18 05:21:46,822 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-18 05:21:46,837 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-18 05:21:46,860 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-18 05:21:46,860 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-12-18 05:21:46,860 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-12-18 05:21:46,860 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_12 [2021-12-18 05:21:46,861 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_12 [2021-12-18 05:21:46,861 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-12-18 05:21:46,861 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-18 05:21:46,861 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-12-18 05:21:46,862 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-12-18 05:21:46,862 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-12-18 05:21:46,862 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-18 05:21:46,862 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-18 05:21:46,862 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-12-18 05:21:46,862 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-12-18 05:21:46,862 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-12-18 05:21:46,863 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-12-18 05:21:46,863 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-12-18 05:21:46,863 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-12-18 05:21:46,863 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-12-18 05:21:46,863 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-12-18 05:21:46,863 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-12-18 05:21:46,863 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-12-18 05:21:46,864 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-12-18 05:21:46,864 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-12-18 05:21:46,864 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-18 05:21:46,864 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-18 05:21:46,864 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-12-18 05:21:46,864 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-12-18 05:21:46,864 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-12-18 05:21:46,864 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-12-18 05:21:46,865 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-12-18 05:21:46,865 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-12-18 05:21:46,865 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_50 [2021-12-18 05:21:46,865 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_50 [2021-12-18 05:21:46,866 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-12-18 05:21:46,866 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-12-18 05:21:46,866 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-18 05:21:46,866 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-18 05:21:46,866 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-18 05:21:46,867 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-18 05:21:46,867 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-18 05:21:46,867 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-18 05:21:46,867 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-12-18 05:21:46,867 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-12-18 05:21:46,867 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-12-18 05:21:46,867 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-12-18 05:21:46,867 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-12-18 05:21:46,868 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-12-18 05:21:46,868 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-12-18 05:21:46,869 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-12-18 05:21:46,869 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_29 [2021-12-18 05:21:46,869 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_29 [2021-12-18 05:21:46,870 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-12-18 05:21:46,870 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-12-18 05:21:46,870 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-18 05:21:46,870 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_27 [2021-12-18 05:21:46,870 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_27 [2021-12-18 05:21:46,870 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-12-18 05:21:46,871 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-12-18 05:21:46,871 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-12-18 05:21:46,871 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-12-18 05:21:46,871 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-18 05:21:46,871 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_13 [2021-12-18 05:21:46,871 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_13 [2021-12-18 05:21:46,871 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-12-18 05:21:46,871 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-12-18 05:21:46,872 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-12-18 05:21:46,872 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-12-18 05:21:46,872 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-12-18 05:21:46,872 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-12-18 05:21:46,873 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-12-18 05:21:46,873 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-12-18 05:21:46,873 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_15 [2021-12-18 05:21:46,873 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_15 [2021-12-18 05:21:46,873 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-12-18 05:21:46,873 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-12-18 05:21:46,873 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-12-18 05:21:46,874 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-18 05:21:46,874 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-12-18 05:21:46,874 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-18 05:21:46,874 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-18 05:21:46,874 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-18 05:21:46,875 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-18 05:21:46,875 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-18 05:21:46,875 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-12-18 05:21:46,875 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-12-18 05:21:46,875 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-12-18 05:21:46,875 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-12-18 05:21:46,876 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-12-18 05:21:46,876 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-12-18 05:21:46,876 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-12-18 05:21:46,877 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-12-18 05:21:46,877 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-12-18 05:21:46,877 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-12-18 05:21:46,878 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-12-18 05:21:46,878 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-12-18 05:21:46,878 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-12-18 05:21:46,878 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-12-18 05:21:46,878 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-12-18 05:21:46,878 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-12-18 05:21:46,878 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-12-18 05:21:46,878 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-12-18 05:21:46,879 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-12-18 05:21:46,879 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-12-18 05:21:46,879 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-12-18 05:21:46,879 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-12-18 05:21:46,879 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-12-18 05:21:46,880 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-12-18 05:21:46,880 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_4 [2021-12-18 05:21:46,880 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_4 [2021-12-18 05:21:46,880 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-12-18 05:21:46,881 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-12-18 05:21:46,883 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-12-18 05:21:46,883 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-12-18 05:21:46,883 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-18 05:21:46,883 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-18 05:21:46,885 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-12-18 05:21:46,885 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-12-18 05:21:46,885 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-12-18 05:21:46,885 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-12-18 05:21:46,885 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-12-18 05:21:46,890 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-12-18 05:21:46,891 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-12-18 05:21:46,891 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-12-18 05:21:46,891 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-18 05:21:46,891 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-18 05:21:46,891 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-12-18 05:21:46,891 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-12-18 05:21:46,891 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-12-18 05:21:46,891 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-12-18 05:21:46,892 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-12-18 05:21:46,892 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-12-18 05:21:46,892 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-12-18 05:21:46,892 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-12-18 05:21:46,892 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-12-18 05:21:46,892 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-12-18 05:21:46,892 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-12-18 05:21:46,892 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-12-18 05:21:46,892 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-12-18 05:21:46,893 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-12-18 05:21:46,893 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_32 [2021-12-18 05:21:46,893 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_32 [2021-12-18 05:21:46,893 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-12-18 05:21:46,893 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-12-18 05:21:46,893 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-18 05:21:46,893 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-12-18 05:21:46,893 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-12-18 05:21:46,894 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_4 [2021-12-18 05:21:46,894 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_4 [2021-12-18 05:21:46,894 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-12-18 05:21:46,894 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-12-18 05:21:46,894 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-12-18 05:21:46,894 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-12-18 05:21:46,894 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-12-18 05:21:46,894 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-12-18 05:21:46,894 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-18 05:21:46,895 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-12-18 05:21:46,895 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-12-18 05:21:46,895 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_9 [2021-12-18 05:21:46,895 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_9 [2021-12-18 05:21:46,895 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-12-18 05:21:46,895 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-12-18 05:21:46,896 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-18 05:21:46,896 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-12-18 05:21:46,896 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-12-18 05:21:46,896 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-12-18 05:21:46,896 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-12-18 05:21:46,896 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-12-18 05:21:46,896 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-12-18 05:21:46,896 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-12-18 05:21:46,897 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-12-18 05:21:46,897 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-12-18 05:21:46,897 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_4 [2021-12-18 05:21:46,897 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_4 [2021-12-18 05:21:46,897 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-12-18 05:21:46,897 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-12-18 05:21:46,897 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-12-18 05:21:46,897 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-12-18 05:21:46,898 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-12-18 05:21:46,898 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-12-18 05:21:46,898 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-12-18 05:21:46,898 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-12-18 05:21:46,898 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-12-18 05:21:46,898 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-12-18 05:21:46,898 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-12-18 05:21:46,898 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-12-18 05:21:46,898 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-12-18 05:21:46,899 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-12-18 05:21:46,899 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-12-18 05:21:46,899 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-12-18 05:21:46,899 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-12-18 05:21:46,899 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-12-18 05:21:46,899 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-12-18 05:21:46,899 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-12-18 05:21:46,899 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-12-18 05:21:46,900 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-12-18 05:21:46,900 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-12-18 05:21:46,900 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-12-18 05:21:46,900 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-12-18 05:21:46,900 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-12-18 05:21:46,900 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~C_ULONG~TO~VOID [2021-12-18 05:21:46,900 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~C_ULONG~TO~VOID [2021-12-18 05:21:46,900 INFO L130 BoogieDeclarations]: Found specification of procedure delayed_work_timer_fn [2021-12-18 05:21:46,901 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_47 [2021-12-18 05:21:46,901 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_47 [2021-12-18 05:21:46,901 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-12-18 05:21:46,901 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-12-18 05:21:46,901 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-12-18 05:21:46,901 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-12-18 05:21:46,901 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-12-18 05:21:46,901 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-12-18 05:21:46,902 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-12-18 05:21:46,902 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-12-18 05:21:46,902 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-12-18 05:21:46,902 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-12-18 05:21:46,902 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-12-18 05:21:46,902 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-12-18 05:21:46,902 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-12-18 05:21:46,902 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-12-18 05:21:46,903 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-18 05:21:46,903 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-18 05:21:47,650 INFO L236 CfgBuilder]: Building ICFG [2021-12-18 05:21:47,653 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-18 05:21:56,371 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-18 05:22:36,464 INFO L277 CfgBuilder]: Performing block encoding [2021-12-18 05:22:36,484 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-18 05:22:36,485 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-18 05:22:36,490 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 05:22:36 BoogieIcfgContainer [2021-12-18 05:22:36,490 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-18 05:22:36,493 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-18 05:22:36,493 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-18 05:22:36,496 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-18 05:22:36,496 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.12 05:21:43" (1/3) ... [2021-12-18 05:22:36,497 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@46bc5e82 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 05:22:36, skipping insertion in model container [2021-12-18 05:22:36,497 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.12 05:21:46" (2/3) ... [2021-12-18 05:22:36,497 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@46bc5e82 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.12 05:22:36, skipping insertion in model container [2021-12-18 05:22:36,498 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 05:22:36" (3/3) ... [2021-12-18 05:22:36,499 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-12-18 05:22:36,505 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-18 05:22:36,508 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-18 05:22:36,562 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-18 05:22:36,567 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-18 05:22:36,568 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-18 05:22:36,618 INFO L276 IsEmpty]: Start isEmpty. Operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) [2021-12-18 05:22:36,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-12-18 05:22:36,632 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:22:36,633 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:22:36,634 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:22:36,638 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:22:36,638 INFO L85 PathProgramCache]: Analyzing trace with hash -956630900, now seen corresponding path program 1 times [2021-12-18 05:22:36,652 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:22:36,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1453287075] [2021-12-18 05:22:36,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:22:36,654 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:22:36,654 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:22:36,661 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:22:36,669 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-18 05:22:37,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:22:37,428 INFO L263 TraceCheckSpWp]: Trace formula consists of 921 conjuncts, 1 conjunts are in the unsatisfiable core [2021-12-18 05:22:37,473 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:22:38,365 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-12-18 05:22:38,366 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:22:38,366 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:22:38,366 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1453287075] [2021-12-18 05:22:38,367 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1453287075] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:22:38,367 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:22:38,367 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-18 05:22:38,369 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [570920506] [2021-12-18 05:22:38,369 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:22:38,372 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-18 05:22:38,372 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:22:38,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-18 05:22:38,394 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-18 05:22:38,399 INFO L87 Difference]: Start difference. First operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) Second operand has 2 states, 2 states have (on average 28.5) internal successors, (57), 2 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-18 05:22:38,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:22:38,554 INFO L93 Difference]: Finished difference Result 3157 states and 4649 transitions. [2021-12-18 05:22:38,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-18 05:22:38,556 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 28.5) internal successors, (57), 2 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 113 [2021-12-18 05:22:38,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:22:38,583 INFO L225 Difference]: With dead ends: 3157 [2021-12-18 05:22:38,583 INFO L226 Difference]: Without dead ends: 1565 [2021-12-18 05:22:38,595 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-18 05:22:38,598 INFO L933 BasicCegarLoop]: 2290 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 2290 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-18 05:22:38,598 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 2290 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-18 05:22:38,615 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1565 states. [2021-12-18 05:22:38,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1565 to 1565. [2021-12-18 05:22:38,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1565 states, 1099 states have (on average 1.3876251137397635) internal successors, (1525), 1154 states have internal predecessors, (1525), 373 states have call successors, (373), 93 states have call predecessors, (373), 92 states have return successors, (369), 343 states have call predecessors, (369), 369 states have call successors, (369) [2021-12-18 05:22:38,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1565 states to 1565 states and 2267 transitions. [2021-12-18 05:22:38,762 INFO L78 Accepts]: Start accepts. Automaton has 1565 states and 2267 transitions. Word has length 113 [2021-12-18 05:22:38,762 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:22:38,763 INFO L470 AbstractCegarLoop]: Abstraction has 1565 states and 2267 transitions. [2021-12-18 05:22:38,763 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 28.5) internal successors, (57), 2 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-12-18 05:22:38,763 INFO L276 IsEmpty]: Start isEmpty. Operand 1565 states and 2267 transitions. [2021-12-18 05:22:38,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-12-18 05:22:38,773 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:22:38,773 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:22:38,797 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-18 05:22:38,994 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:22:38,994 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:22:38,995 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:22:38,995 INFO L85 PathProgramCache]: Analyzing trace with hash -1997437564, now seen corresponding path program 1 times [2021-12-18 05:22:38,996 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:22:38,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1814057005] [2021-12-18 05:22:38,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:22:38,997 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:22:38,997 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:22:38,998 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:22:39,034 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-18 05:22:39,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:22:39,731 INFO L263 TraceCheckSpWp]: Trace formula consists of 921 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-18 05:22:39,735 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:22:40,690 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2021-12-18 05:22:40,690 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:22:40,691 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:22:40,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1814057005] [2021-12-18 05:22:40,691 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1814057005] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:22:40,691 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:22:40,691 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-18 05:22:40,691 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [946671070] [2021-12-18 05:22:40,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:22:40,692 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-18 05:22:40,692 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:22:40,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-18 05:22:40,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-18 05:22:40,693 INFO L87 Difference]: Start difference. First operand 1565 states and 2267 transitions. Second operand has 6 states, 5 states have (on average 10.6) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-12-18 05:22:41,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:22:41,735 INFO L93 Difference]: Finished difference Result 3124 states and 4529 transitions. [2021-12-18 05:22:41,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 05:22:41,736 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 10.6) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 113 [2021-12-18 05:22:41,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:22:41,747 INFO L225 Difference]: With dead ends: 3124 [2021-12-18 05:22:41,747 INFO L226 Difference]: Without dead ends: 1568 [2021-12-18 05:22:41,753 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 114 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2021-12-18 05:22:41,754 INFO L933 BasicCegarLoop]: 2258 mSDtfsCounter, 6 mSDsluCounter, 9018 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11276 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-18 05:22:41,754 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11276 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-18 05:22:41,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1568 states. [2021-12-18 05:22:41,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1568 to 1568. [2021-12-18 05:22:41,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1568 states, 1101 states have (on average 1.387829246139873) internal successors, (1528), 1157 states have internal predecessors, (1528), 373 states have call successors, (373), 93 states have call predecessors, (373), 93 states have return successors, (373), 343 states have call predecessors, (373), 369 states have call successors, (373) [2021-12-18 05:22:41,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1568 states to 1568 states and 2274 transitions. [2021-12-18 05:22:41,822 INFO L78 Accepts]: Start accepts. Automaton has 1568 states and 2274 transitions. Word has length 113 [2021-12-18 05:22:41,823 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:22:41,824 INFO L470 AbstractCegarLoop]: Abstraction has 1568 states and 2274 transitions. [2021-12-18 05:22:41,824 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 10.6) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-12-18 05:22:41,824 INFO L276 IsEmpty]: Start isEmpty. Operand 1568 states and 2274 transitions. [2021-12-18 05:22:41,832 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-12-18 05:22:41,832 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:22:41,833 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:22:41,857 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-18 05:22:42,047 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:22:42,048 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:22:42,048 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:22:42,048 INFO L85 PathProgramCache]: Analyzing trace with hash -54256158, now seen corresponding path program 1 times [2021-12-18 05:22:42,049 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:22:42,049 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1961427504] [2021-12-18 05:22:42,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:22:42,050 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:22:42,050 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:22:42,052 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:22:42,054 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-18 05:22:42,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:22:42,802 INFO L263 TraceCheckSpWp]: Trace formula consists of 943 conjuncts, 6 conjunts are in the unsatisfiable core [2021-12-18 05:22:42,806 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:22:43,858 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2021-12-18 05:22:43,858 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-18 05:22:46,185 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-18 05:22:46,186 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:22:46,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1961427504] [2021-12-18 05:22:46,186 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1961427504] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-18 05:22:46,186 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-18 05:22:46,186 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 11 [2021-12-18 05:22:46,186 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [838474809] [2021-12-18 05:22:46,187 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-18 05:22:46,187 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-12-18 05:22:46,187 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:22:46,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-12-18 05:22:46,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2021-12-18 05:22:46,188 INFO L87 Difference]: Start difference. First operand 1568 states and 2274 transitions. Second operand has 11 states, 9 states have (on average 7.555555555555555) internal successors, (68), 11 states have internal predecessors, (68), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-18 05:22:47,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:22:47,968 INFO L93 Difference]: Finished difference Result 3130 states and 4543 transitions. [2021-12-18 05:22:47,970 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-18 05:22:47,971 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 7.555555555555555) internal successors, (68), 11 states have internal predecessors, (68), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 115 [2021-12-18 05:22:47,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:22:47,982 INFO L225 Difference]: With dead ends: 3130 [2021-12-18 05:22:47,982 INFO L226 Difference]: Without dead ends: 1571 [2021-12-18 05:22:47,989 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 219 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=46, Invalid=136, Unknown=0, NotChecked=0, Total=182 [2021-12-18 05:22:47,992 INFO L933 BasicCegarLoop]: 2259 mSDtfsCounter, 19 mSDsluCounter, 9015 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 11274 SdHoareTripleChecker+Invalid, 97 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-12-18 05:22:47,994 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 11274 Invalid, 97 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-12-18 05:22:47,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1571 states. [2021-12-18 05:22:48,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1571 to 1569. [2021-12-18 05:22:48,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1569 states, 1102 states have (on average 1.3883847549909256) internal successors, (1530), 1158 states have internal predecessors, (1530), 373 states have call successors, (373), 93 states have call predecessors, (373), 93 states have return successors, (373), 343 states have call predecessors, (373), 369 states have call successors, (373) [2021-12-18 05:22:48,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1569 states to 1569 states and 2276 transitions. [2021-12-18 05:22:48,053 INFO L78 Accepts]: Start accepts. Automaton has 1569 states and 2276 transitions. Word has length 115 [2021-12-18 05:22:48,053 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:22:48,055 INFO L470 AbstractCegarLoop]: Abstraction has 1569 states and 2276 transitions. [2021-12-18 05:22:48,055 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 7.555555555555555) internal successors, (68), 11 states have internal predecessors, (68), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-18 05:22:48,056 INFO L276 IsEmpty]: Start isEmpty. Operand 1569 states and 2276 transitions. [2021-12-18 05:22:48,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-12-18 05:22:48,058 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:22:48,058 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:22:48,081 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-12-18 05:22:48,271 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:22:48,271 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:22:48,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:22:48,272 INFO L85 PathProgramCache]: Analyzing trace with hash 409821892, now seen corresponding path program 2 times [2021-12-18 05:22:48,273 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:22:48,273 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [303137949] [2021-12-18 05:22:48,273 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-18 05:22:48,273 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:22:48,273 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:22:48,276 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:22:48,278 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-18 05:22:48,853 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-18 05:22:48,853 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-18 05:22:48,874 INFO L263 TraceCheckSpWp]: Trace formula consists of 742 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:22:48,878 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:22:51,503 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-12-18 05:22:51,503 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:22:51,503 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:22:51,503 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [303137949] [2021-12-18 05:22:51,504 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [303137949] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:22:51,504 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:22:51,504 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-18 05:22:51,504 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [826972439] [2021-12-18 05:22:51,504 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:22:51,504 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:22:51,504 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:22:51,505 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:22:51,505 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:22:51,505 INFO L87 Difference]: Start difference. First operand 1569 states and 2276 transitions. Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-18 05:22:51,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:22:51,780 INFO L93 Difference]: Finished difference Result 4654 states and 6900 transitions. [2021-12-18 05:22:51,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:22:51,780 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 117 [2021-12-18 05:22:51,783 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:22:51,802 INFO L225 Difference]: With dead ends: 4654 [2021-12-18 05:22:51,802 INFO L226 Difference]: Without dead ends: 3108 [2021-12-18 05:22:51,810 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:22:51,812 INFO L933 BasicCegarLoop]: 2881 mSDtfsCounter, 2198 mSDsluCounter, 2258 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2198 SdHoareTripleChecker+Valid, 5139 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 05:22:51,813 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2198 Valid, 5139 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 05:22:51,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3108 states. [2021-12-18 05:22:51,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3108 to 3102. [2021-12-18 05:22:51,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3102 states, 2182 states have (on average 1.3890925756186985) internal successors, (3031), 2290 states have internal predecessors, (3031), 735 states have call successors, (735), 184 states have call predecessors, (735), 184 states have return successors, (770), 679 states have call predecessors, (770), 731 states have call successors, (770) [2021-12-18 05:22:51,969 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3102 states to 3102 states and 4536 transitions. [2021-12-18 05:22:51,970 INFO L78 Accepts]: Start accepts. Automaton has 3102 states and 4536 transitions. Word has length 117 [2021-12-18 05:22:51,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:22:51,970 INFO L470 AbstractCegarLoop]: Abstraction has 3102 states and 4536 transitions. [2021-12-18 05:22:51,971 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-18 05:22:51,971 INFO L276 IsEmpty]: Start isEmpty. Operand 3102 states and 4536 transitions. [2021-12-18 05:22:51,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2021-12-18 05:22:51,974 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:22:51,974 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:22:51,996 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2021-12-18 05:22:52,187 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:22:52,188 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:22:52,188 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:22:52,188 INFO L85 PathProgramCache]: Analyzing trace with hash -180969058, now seen corresponding path program 1 times [2021-12-18 05:22:52,189 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:22:52,189 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1478119849] [2021-12-18 05:22:52,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:22:52,189 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:22:52,190 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:22:52,193 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:22:52,195 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-12-18 05:22:52,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:22:52,880 INFO L263 TraceCheckSpWp]: Trace formula consists of 966 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-18 05:22:52,882 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:22:54,101 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-12-18 05:22:54,101 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-18 05:22:56,925 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2021-12-18 05:22:56,926 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:22:56,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1478119849] [2021-12-18 05:22:56,926 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1478119849] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-18 05:22:56,926 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-18 05:22:56,926 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 13 [2021-12-18 05:22:56,926 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1660980567] [2021-12-18 05:22:56,926 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-18 05:22:56,927 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-18 05:22:56,927 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:22:56,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-18 05:22:56,928 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2021-12-18 05:22:56,928 INFO L87 Difference]: Start difference. First operand 3102 states and 4536 transitions. Second operand has 13 states, 11 states have (on average 6.454545454545454) internal successors, (71), 13 states have internal predecessors, (71), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-18 05:23:00,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:00,287 INFO L93 Difference]: Finished difference Result 6209 states and 9093 transitions. [2021-12-18 05:23:00,289 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-18 05:23:00,289 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 6.454545454545454) internal successors, (71), 13 states have internal predecessors, (71), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 118 [2021-12-18 05:23:00,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:00,347 INFO L225 Difference]: With dead ends: 6209 [2021-12-18 05:23:00,347 INFO L226 Difference]: Without dead ends: 3116 [2021-12-18 05:23:00,359 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 238 GetRequests, 223 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2021-12-18 05:23:00,359 INFO L933 BasicCegarLoop]: 2260 mSDtfsCounter, 25 mSDsluCounter, 15784 mSDsCounter, 0 mSdLazyCounter, 193 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 18044 SdHoareTripleChecker+Invalid, 199 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 193 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:00,360 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 18044 Invalid, 199 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 193 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2021-12-18 05:23:00,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3116 states. [2021-12-18 05:23:00,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3116 to 3103. [2021-12-18 05:23:00,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3103 states, 2183 states have (on average 1.3893724232707283) internal successors, (3033), 2291 states have internal predecessors, (3033), 735 states have call successors, (735), 184 states have call predecessors, (735), 184 states have return successors, (770), 679 states have call predecessors, (770), 731 states have call successors, (770) [2021-12-18 05:23:00,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3103 states to 3103 states and 4538 transitions. [2021-12-18 05:23:00,479 INFO L78 Accepts]: Start accepts. Automaton has 3103 states and 4538 transitions. Word has length 118 [2021-12-18 05:23:00,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:00,479 INFO L470 AbstractCegarLoop]: Abstraction has 3103 states and 4538 transitions. [2021-12-18 05:23:00,480 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 6.454545454545454) internal successors, (71), 13 states have internal predecessors, (71), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-18 05:23:00,480 INFO L276 IsEmpty]: Start isEmpty. Operand 3103 states and 4538 transitions. [2021-12-18 05:23:00,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2021-12-18 05:23:00,483 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:00,483 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:00,509 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:00,704 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:00,705 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:00,705 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:00,705 INFO L85 PathProgramCache]: Analyzing trace with hash 615904384, now seen corresponding path program 2 times [2021-12-18 05:23:00,706 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:00,706 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1176845099] [2021-12-18 05:23:00,707 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-18 05:23:00,707 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:00,707 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:00,709 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:00,711 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-12-18 05:23:01,321 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-18 05:23:01,321 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-18 05:23:01,341 INFO L263 TraceCheckSpWp]: Trace formula consists of 743 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:23:01,344 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:03,977 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-12-18 05:23:03,977 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:03,977 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:03,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1176845099] [2021-12-18 05:23:03,977 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1176845099] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:03,977 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:03,977 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-18 05:23:03,978 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [175855789] [2021-12-18 05:23:03,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:03,978 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:23:03,978 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:03,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:23:03,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:03,979 INFO L87 Difference]: Start difference. First operand 3103 states and 4538 transitions. Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-18 05:23:04,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:04,209 INFO L93 Difference]: Finished difference Result 8900 states and 13260 transitions. [2021-12-18 05:23:04,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:23:04,209 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 120 [2021-12-18 05:23:04,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:04,253 INFO L225 Difference]: With dead ends: 8900 [2021-12-18 05:23:04,253 INFO L226 Difference]: Without dead ends: 5820 [2021-12-18 05:23:04,357 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:04,357 INFO L933 BasicCegarLoop]: 2593 mSDtfsCounter, 1944 mSDsluCounter, 2228 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1944 SdHoareTripleChecker+Valid, 4821 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:04,358 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1944 Valid, 4821 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 05:23:04,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5820 states. [2021-12-18 05:23:04,534 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5820 to 5808. [2021-12-18 05:23:04,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5808 states, 4086 states have (on average 1.3952520802741066) internal successors, (5701), 4296 states have internal predecessors, (5701), 1371 states have call successors, (1371), 350 states have call predecessors, (1371), 350 states have return successors, (1439), 1263 states have call predecessors, (1439), 1367 states have call successors, (1439) [2021-12-18 05:23:04,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5808 states to 5808 states and 8511 transitions. [2021-12-18 05:23:04,589 INFO L78 Accepts]: Start accepts. Automaton has 5808 states and 8511 transitions. Word has length 120 [2021-12-18 05:23:04,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:04,591 INFO L470 AbstractCegarLoop]: Abstraction has 5808 states and 8511 transitions. [2021-12-18 05:23:04,592 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 2 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-18 05:23:04,592 INFO L276 IsEmpty]: Start isEmpty. Operand 5808 states and 8511 transitions. [2021-12-18 05:23:04,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-12-18 05:23:04,594 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:04,595 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:04,615 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:04,812 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:04,813 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:04,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:04,813 INFO L85 PathProgramCache]: Analyzing trace with hash 1912625765, now seen corresponding path program 1 times [2021-12-18 05:23:04,814 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:04,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1847669232] [2021-12-18 05:23:04,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:04,814 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:04,814 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:04,815 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:04,816 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-12-18 05:23:05,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:05,414 INFO L263 TraceCheckSpWp]: Trace formula consists of 989 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-18 05:23:05,419 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:06,838 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 24 proven. 6 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2021-12-18 05:23:06,838 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-18 05:23:10,545 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2021-12-18 05:23:10,546 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:10,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1847669232] [2021-12-18 05:23:10,546 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1847669232] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-18 05:23:10,546 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-18 05:23:10,546 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2021-12-18 05:23:10,546 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [533678494] [2021-12-18 05:23:10,546 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-18 05:23:10,547 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-18 05:23:10,547 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:10,547 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-18 05:23:10,547 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=165, Unknown=0, NotChecked=0, Total=210 [2021-12-18 05:23:10,548 INFO L87 Difference]: Start difference. First operand 5808 states and 8511 transitions. Second operand has 15 states, 13 states have (on average 5.6923076923076925) internal successors, (74), 15 states have internal predecessors, (74), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-18 05:23:14,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:14,909 INFO L93 Difference]: Finished difference Result 11650 states and 17111 transitions. [2021-12-18 05:23:14,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-18 05:23:14,912 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 5.6923076923076925) internal successors, (74), 15 states have internal predecessors, (74), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 121 [2021-12-18 05:23:14,912 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:14,953 INFO L225 Difference]: With dead ends: 11650 [2021-12-18 05:23:14,954 INFO L226 Difference]: Without dead ends: 5851 [2021-12-18 05:23:14,986 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 245 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=83, Invalid=297, Unknown=0, NotChecked=0, Total=380 [2021-12-18 05:23:14,988 INFO L933 BasicCegarLoop]: 2261 mSDtfsCounter, 34 mSDsluCounter, 18049 mSDsCounter, 0 mSdLazyCounter, 272 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 20310 SdHoareTripleChecker+Invalid, 282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 272 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:14,988 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [36 Valid, 20310 Invalid, 282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 272 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2021-12-18 05:23:14,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5851 states. [2021-12-18 05:23:15,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5851 to 5809. [2021-12-18 05:23:15,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5809 states, 4087 states have (on average 1.3954000489356497) internal successors, (5703), 4297 states have internal predecessors, (5703), 1371 states have call successors, (1371), 350 states have call predecessors, (1371), 350 states have return successors, (1439), 1263 states have call predecessors, (1439), 1367 states have call successors, (1439) [2021-12-18 05:23:15,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5809 states to 5809 states and 8513 transitions. [2021-12-18 05:23:15,302 INFO L78 Accepts]: Start accepts. Automaton has 5809 states and 8513 transitions. Word has length 121 [2021-12-18 05:23:15,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:15,303 INFO L470 AbstractCegarLoop]: Abstraction has 5809 states and 8513 transitions. [2021-12-18 05:23:15,303 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 5.6923076923076925) internal successors, (74), 15 states have internal predecessors, (74), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-12-18 05:23:15,303 INFO L276 IsEmpty]: Start isEmpty. Operand 5809 states and 8513 transitions. [2021-12-18 05:23:15,306 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-12-18 05:23:15,307 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:15,307 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:15,330 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:15,523 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:15,524 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:15,524 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:15,524 INFO L85 PathProgramCache]: Analyzing trace with hash -1080283577, now seen corresponding path program 2 times [2021-12-18 05:23:15,525 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:15,525 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [696449752] [2021-12-18 05:23:15,525 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-18 05:23:15,526 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:15,526 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:15,528 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:15,531 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-12-18 05:23:16,092 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-12-18 05:23:16,092 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-12-18 05:23:16,107 INFO L263 TraceCheckSpWp]: Trace formula consists of 744 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:23:16,110 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:18,660 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-18 05:23:18,661 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:18,661 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:18,661 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [696449752] [2021-12-18 05:23:18,661 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [696449752] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:18,661 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:18,661 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-18 05:23:18,661 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1987870504] [2021-12-18 05:23:18,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:18,662 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:23:18,662 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:18,662 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:23:18,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:18,663 INFO L87 Difference]: Start difference. First operand 5809 states and 8513 transitions. Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-18 05:23:18,840 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:18,840 INFO L93 Difference]: Finished difference Result 5811 states and 8514 transitions. [2021-12-18 05:23:18,841 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:23:18,841 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 123 [2021-12-18 05:23:18,841 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:18,878 INFO L225 Difference]: With dead ends: 5811 [2021-12-18 05:23:18,878 INFO L226 Difference]: Without dead ends: 5808 [2021-12-18 05:23:18,880 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:18,881 INFO L933 BasicCegarLoop]: 2264 mSDtfsCounter, 2199 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2199 SdHoareTripleChecker+Valid, 2264 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:18,881 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2199 Valid, 2264 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-18 05:23:18,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5808 states. [2021-12-18 05:23:19,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5808 to 5808. [2021-12-18 05:23:19,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5808 states, 4087 states have (on average 1.395155370687546) internal successors, (5702), 4296 states have internal predecessors, (5702), 1370 states have call successors, (1370), 350 states have call predecessors, (1370), 350 states have return successors, (1439), 1263 states have call predecessors, (1439), 1367 states have call successors, (1439) [2021-12-18 05:23:19,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5808 states to 5808 states and 8511 transitions. [2021-12-18 05:23:19,081 INFO L78 Accepts]: Start accepts. Automaton has 5808 states and 8511 transitions. Word has length 123 [2021-12-18 05:23:19,082 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:19,082 INFO L470 AbstractCegarLoop]: Abstraction has 5808 states and 8511 transitions. [2021-12-18 05:23:19,082 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 2 states have internal predecessors, (50), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-18 05:23:19,082 INFO L276 IsEmpty]: Start isEmpty. Operand 5808 states and 8511 transitions. [2021-12-18 05:23:19,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-12-18 05:23:19,085 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:19,085 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:19,106 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:19,302 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:19,303 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:19,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:19,304 INFO L85 PathProgramCache]: Analyzing trace with hash 870411393, now seen corresponding path program 1 times [2021-12-18 05:23:19,305 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:19,305 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1867129696] [2021-12-18 05:23:19,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:19,305 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:19,305 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:19,306 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:19,310 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-12-18 05:23:20,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:20,048 INFO L263 TraceCheckSpWp]: Trace formula consists of 1012 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:23:20,052 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:22,613 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-12-18 05:23:22,613 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:22,614 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:22,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1867129696] [2021-12-18 05:23:22,614 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1867129696] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:22,614 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:22,614 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-18 05:23:22,614 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1501837741] [2021-12-18 05:23:22,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:22,615 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:23:22,615 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:22,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:23:22,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:22,616 INFO L87 Difference]: Start difference. First operand 5808 states and 8511 transitions. Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-18 05:23:22,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:22,724 INFO L93 Difference]: Finished difference Result 5810 states and 8512 transitions. [2021-12-18 05:23:22,724 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:23:22,724 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 124 [2021-12-18 05:23:22,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:22,763 INFO L225 Difference]: With dead ends: 5810 [2021-12-18 05:23:22,763 INFO L226 Difference]: Without dead ends: 5778 [2021-12-18 05:23:22,767 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 122 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:22,769 INFO L933 BasicCegarLoop]: 2263 mSDtfsCounter, 2196 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2196 SdHoareTripleChecker+Valid, 2263 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:22,770 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2196 Valid, 2263 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-18 05:23:22,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5778 states. [2021-12-18 05:23:22,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5778 to 5778. [2021-12-18 05:23:22,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5778 states, 4071 states have (on average 1.395725865880619) internal successors, (5682), 4279 states have internal predecessors, (5682), 1357 states have call successors, (1357), 349 states have call predecessors, (1357), 349 states have return successors, (1427), 1251 states have call predecessors, (1427), 1355 states have call successors, (1427) [2021-12-18 05:23:23,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5778 states to 5778 states and 8466 transitions. [2021-12-18 05:23:23,010 INFO L78 Accepts]: Start accepts. Automaton has 5778 states and 8466 transitions. Word has length 124 [2021-12-18 05:23:23,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:23,010 INFO L470 AbstractCegarLoop]: Abstraction has 5778 states and 8466 transitions. [2021-12-18 05:23:23,010 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2021-12-18 05:23:23,011 INFO L276 IsEmpty]: Start isEmpty. Operand 5778 states and 8466 transitions. [2021-12-18 05:23:23,020 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 175 [2021-12-18 05:23:23,020 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:23,020 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:23,047 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:23,236 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:23,237 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:23,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:23,237 INFO L85 PathProgramCache]: Analyzing trace with hash -1073965636, now seen corresponding path program 1 times [2021-12-18 05:23:23,238 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:23,238 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1444906750] [2021-12-18 05:23:23,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:23,239 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:23,239 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:23,240 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:23,241 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-12-18 05:23:24,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:24,111 INFO L263 TraceCheckSpWp]: Trace formula consists of 1333 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:23:24,115 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:25,144 INFO L134 CoverageAnalysis]: Checked inductivity of 152 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2021-12-18 05:23:25,145 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:25,145 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:25,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1444906750] [2021-12-18 05:23:25,145 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1444906750] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:25,145 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:25,145 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 05:23:25,145 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [391026948] [2021-12-18 05:23:25,145 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:25,146 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:23:25,146 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:25,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:23:25,146 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:25,147 INFO L87 Difference]: Start difference. First operand 5778 states and 8466 transitions. Second operand has 3 states, 3 states have (on average 26.666666666666668) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-18 05:23:25,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:25,770 INFO L93 Difference]: Finished difference Result 16681 states and 24440 transitions. [2021-12-18 05:23:25,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:23:25,771 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.666666666666668) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 174 [2021-12-18 05:23:25,771 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:25,826 INFO L225 Difference]: With dead ends: 16681 [2021-12-18 05:23:25,827 INFO L226 Difference]: Without dead ends: 10926 [2021-12-18 05:23:25,899 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 172 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:25,899 INFO L933 BasicCegarLoop]: 2684 mSDtfsCounter, 1924 mSDsluCounter, 2176 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1924 SdHoareTripleChecker+Valid, 4860 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:25,900 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1924 Valid, 4860 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-18 05:23:25,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10926 states. [2021-12-18 05:23:26,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10926 to 10902. [2021-12-18 05:23:26,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10902 states, 7675 states have (on average 1.3985667752442996) internal successors, (10734), 8087 states have internal predecessors, (10734), 2549 states have call successors, (2549), 677 states have call predecessors, (2549), 677 states have return successors, (2685), 2339 states have call predecessors, (2685), 2547 states have call successors, (2685) [2021-12-18 05:23:26,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10902 states to 10902 states and 15968 transitions. [2021-12-18 05:23:26,650 INFO L78 Accepts]: Start accepts. Automaton has 10902 states and 15968 transitions. Word has length 174 [2021-12-18 05:23:26,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:26,650 INFO L470 AbstractCegarLoop]: Abstraction has 10902 states and 15968 transitions. [2021-12-18 05:23:26,650 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.666666666666668) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-12-18 05:23:26,651 INFO L276 IsEmpty]: Start isEmpty. Operand 10902 states and 15968 transitions. [2021-12-18 05:23:26,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2021-12-18 05:23:26,669 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:26,669 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:26,703 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:26,883 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:26,884 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:26,884 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:26,884 INFO L85 PathProgramCache]: Analyzing trace with hash 1555787969, now seen corresponding path program 1 times [2021-12-18 05:23:26,885 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:26,885 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [949526236] [2021-12-18 05:23:26,885 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:26,886 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:26,886 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:26,887 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:26,889 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-12-18 05:23:27,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:27,836 INFO L263 TraceCheckSpWp]: Trace formula consists of 1485 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-18 05:23:27,841 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:28,918 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 209 trivial. 0 not checked. [2021-12-18 05:23:28,919 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:28,919 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:28,919 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [949526236] [2021-12-18 05:23:28,919 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [949526236] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:28,919 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:28,920 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-18 05:23:28,920 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [161179648] [2021-12-18 05:23:28,920 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:28,920 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-18 05:23:28,920 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:28,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-18 05:23:28,921 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-18 05:23:28,921 INFO L87 Difference]: Start difference. First operand 10902 states and 15968 transitions. Second operand has 4 states, 4 states have (on average 25.5) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-18 05:23:31,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:31,148 INFO L93 Difference]: Finished difference Result 24094 states and 35708 transitions. [2021-12-18 05:23:31,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-18 05:23:31,149 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 25.5) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 212 [2021-12-18 05:23:31,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:31,222 INFO L225 Difference]: With dead ends: 24094 [2021-12-18 05:23:31,223 INFO L226 Difference]: Without dead ends: 13215 [2021-12-18 05:23:31,264 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 210 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-18 05:23:31,265 INFO L933 BasicCegarLoop]: 2585 mSDtfsCounter, 3032 mSDsluCounter, 2323 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3032 SdHoareTripleChecker+Valid, 4908 SdHoareTripleChecker+Invalid, 300 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 177 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:31,265 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3032 Valid, 4908 Invalid, 300 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [177 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2021-12-18 05:23:31,279 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13215 states. [2021-12-18 05:23:31,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13215 to 10916. [2021-12-18 05:23:31,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10916 states, 7689 states have (on average 1.397841071660814) internal successors, (10748), 8101 states have internal predecessors, (10748), 2549 states have call successors, (2549), 677 states have call predecessors, (2549), 677 states have return successors, (2685), 2339 states have call predecessors, (2685), 2547 states have call successors, (2685) [2021-12-18 05:23:31,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10916 states to 10916 states and 15982 transitions. [2021-12-18 05:23:31,913 INFO L78 Accepts]: Start accepts. Automaton has 10916 states and 15982 transitions. Word has length 212 [2021-12-18 05:23:31,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:31,914 INFO L470 AbstractCegarLoop]: Abstraction has 10916 states and 15982 transitions. [2021-12-18 05:23:31,915 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 25.5) internal successors, (102), 4 states have internal predecessors, (102), 2 states have call successors, (18), 2 states have call predecessors, (18), 2 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-12-18 05:23:31,915 INFO L276 IsEmpty]: Start isEmpty. Operand 10916 states and 15982 transitions. [2021-12-18 05:23:31,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 230 [2021-12-18 05:23:31,938 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:31,938 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:31,972 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:32,159 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:32,159 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:32,160 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:32,160 INFO L85 PathProgramCache]: Analyzing trace with hash 672057816, now seen corresponding path program 1 times [2021-12-18 05:23:32,161 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:32,161 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [983022005] [2021-12-18 05:23:32,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:32,162 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:32,162 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:32,164 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:32,165 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-12-18 05:23:33,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:33,453 INFO L263 TraceCheckSpWp]: Trace formula consists of 1535 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-18 05:23:33,458 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:34,828 INFO L134 CoverageAnalysis]: Checked inductivity of 296 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 274 trivial. 0 not checked. [2021-12-18 05:23:34,829 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:34,829 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:34,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [983022005] [2021-12-18 05:23:34,829 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [983022005] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:34,829 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:34,829 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 05:23:34,829 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1829611820] [2021-12-18 05:23:34,829 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:34,830 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 05:23:34,830 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:34,830 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 05:23:34,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 05:23:34,831 INFO L87 Difference]: Start difference. First operand 10916 states and 15982 transitions. Second operand has 5 states, 5 states have (on average 21.4) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-18 05:23:35,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:35,601 INFO L93 Difference]: Finished difference Result 16593 states and 24305 transitions. [2021-12-18 05:23:35,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 05:23:35,603 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 229 [2021-12-18 05:23:35,603 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:35,658 INFO L225 Difference]: With dead ends: 16593 [2021-12-18 05:23:35,659 INFO L226 Difference]: Without dead ends: 10952 [2021-12-18 05:23:35,681 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 229 GetRequests, 225 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-12-18 05:23:35,682 INFO L933 BasicCegarLoop]: 2263 mSDtfsCounter, 1 mSDsluCounter, 6779 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 9042 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:35,682 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 9042 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-18 05:23:35,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10952 states. [2021-12-18 05:23:36,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10952 to 10932. [2021-12-18 05:23:36,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10932 states, 7701 states have (on average 1.3972211401116739) internal successors, (10760), 8113 states have internal predecessors, (10760), 2549 states have call successors, (2549), 677 states have call predecessors, (2549), 681 states have return successors, (2703), 2343 states have call predecessors, (2703), 2547 states have call successors, (2703) [2021-12-18 05:23:36,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10932 states to 10932 states and 16012 transitions. [2021-12-18 05:23:36,163 INFO L78 Accepts]: Start accepts. Automaton has 10932 states and 16012 transitions. Word has length 229 [2021-12-18 05:23:36,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:36,163 INFO L470 AbstractCegarLoop]: Abstraction has 10932 states and 16012 transitions. [2021-12-18 05:23:36,163 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-12-18 05:23:36,163 INFO L276 IsEmpty]: Start isEmpty. Operand 10932 states and 16012 transitions. [2021-12-18 05:23:36,185 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 236 [2021-12-18 05:23:36,186 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:36,186 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:36,225 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:36,407 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:36,407 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:36,408 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:36,408 INFO L85 PathProgramCache]: Analyzing trace with hash 355410478, now seen corresponding path program 1 times [2021-12-18 05:23:36,409 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:36,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1648458585] [2021-12-18 05:23:36,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:36,409 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:36,410 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:36,411 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:36,413 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-12-18 05:23:37,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:37,577 INFO L263 TraceCheckSpWp]: Trace formula consists of 1552 conjuncts, 17 conjunts are in the unsatisfiable core [2021-12-18 05:23:37,582 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:39,516 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 300 trivial. 0 not checked. [2021-12-18 05:23:39,516 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:39,516 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:39,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1648458585] [2021-12-18 05:23:39,517 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1648458585] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:39,517 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:39,517 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-18 05:23:39,517 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558260390] [2021-12-18 05:23:39,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:39,518 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-18 05:23:39,518 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:39,518 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-18 05:23:39,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-12-18 05:23:39,518 INFO L87 Difference]: Start difference. First operand 10932 states and 16012 transitions. Second operand has 9 states, 8 states have (on average 13.375) internal successors, (107), 7 states have internal predecessors, (107), 3 states have call successors, (20), 2 states have call predecessors, (20), 4 states have return successors, (19), 4 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 05:23:41,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:41,209 INFO L93 Difference]: Finished difference Result 15194 states and 22441 transitions. [2021-12-18 05:23:41,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-18 05:23:41,210 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 13.375) internal successors, (107), 7 states have internal predecessors, (107), 3 states have call successors, (20), 2 states have call predecessors, (20), 4 states have return successors, (19), 4 states have call predecessors, (19), 2 states have call successors, (19) Word has length 235 [2021-12-18 05:23:41,211 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:41,273 INFO L225 Difference]: With dead ends: 15194 [2021-12-18 05:23:41,273 INFO L226 Difference]: Without dead ends: 12367 [2021-12-18 05:23:41,287 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-18 05:23:41,288 INFO L933 BasicCegarLoop]: 2938 mSDtfsCounter, 491 mSDsluCounter, 19969 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 612 SdHoareTripleChecker+Valid, 22907 SdHoareTripleChecker+Invalid, 97 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:41,288 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [612 Valid, 22907 Invalid, 97 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-18 05:23:41,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12367 states. [2021-12-18 05:23:41,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12367 to 10950. [2021-12-18 05:23:41,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10950 states, 7711 states have (on average 1.3967060044092854) internal successors, (10770), 8127 states have internal predecessors, (10770), 2551 states have call successors, (2551), 677 states have call predecessors, (2551), 687 states have return successors, (2717), 2347 states have call predecessors, (2717), 2549 states have call successors, (2717) [2021-12-18 05:23:41,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10950 states to 10950 states and 16038 transitions. [2021-12-18 05:23:41,794 INFO L78 Accepts]: Start accepts. Automaton has 10950 states and 16038 transitions. Word has length 235 [2021-12-18 05:23:41,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:41,795 INFO L470 AbstractCegarLoop]: Abstraction has 10950 states and 16038 transitions. [2021-12-18 05:23:41,795 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 13.375) internal successors, (107), 7 states have internal predecessors, (107), 3 states have call successors, (20), 2 states have call predecessors, (20), 4 states have return successors, (19), 4 states have call predecessors, (19), 2 states have call successors, (19) [2021-12-18 05:23:41,795 INFO L276 IsEmpty]: Start isEmpty. Operand 10950 states and 16038 transitions. [2021-12-18 05:23:41,813 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2021-12-18 05:23:41,813 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:41,814 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:41,849 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:42,035 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:42,036 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:42,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:42,036 INFO L85 PathProgramCache]: Analyzing trace with hash -1166123018, now seen corresponding path program 1 times [2021-12-18 05:23:42,037 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:42,037 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1949831482] [2021-12-18 05:23:42,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:42,037 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:42,038 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:42,038 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:42,040 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-12-18 05:23:43,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:43,140 INFO L263 TraceCheckSpWp]: Trace formula consists of 1552 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-18 05:23:43,143 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:43,841 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-12-18 05:23:43,841 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:43,842 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:43,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1949831482] [2021-12-18 05:23:43,842 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1949831482] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:43,842 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:43,842 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 05:23:43,842 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [788188374] [2021-12-18 05:23:43,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:43,843 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 05:23:43,843 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:43,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 05:23:43,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 05:23:43,844 INFO L87 Difference]: Start difference. First operand 10950 states and 16038 transitions. Second operand has 5 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-12-18 05:23:47,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:47,439 INFO L93 Difference]: Finished difference Result 22316 states and 32676 transitions. [2021-12-18 05:23:47,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-18 05:23:47,441 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) Word has length 236 [2021-12-18 05:23:47,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:47,522 INFO L225 Difference]: With dead ends: 22316 [2021-12-18 05:23:47,522 INFO L226 Difference]: Without dead ends: 16653 [2021-12-18 05:23:47,551 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 234 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-18 05:23:47,552 INFO L933 BasicCegarLoop]: 4365 mSDtfsCounter, 2927 mSDsluCounter, 10113 mSDsCounter, 0 mSdLazyCounter, 164 mSolverCounterSat, 272 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2948 SdHoareTripleChecker+Valid, 14478 SdHoareTripleChecker+Invalid, 436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 272 IncrementalHoareTripleChecker+Valid, 164 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:47,553 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2948 Valid, 14478 Invalid, 436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [272 Valid, 164 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2021-12-18 05:23:47,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16653 states. [2021-12-18 05:23:48,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16653 to 10972. [2021-12-18 05:23:48,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10972 states, 7725 states have (on average 1.3959870550161813) internal successors, (10784), 8141 states have internal predecessors, (10784), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 687 states have return successors, (2725), 2355 states have call predecessors, (2725), 2557 states have call successors, (2725) [2021-12-18 05:23:48,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10972 states to 10972 states and 16068 transitions. [2021-12-18 05:23:48,237 INFO L78 Accepts]: Start accepts. Automaton has 10972 states and 16068 transitions. Word has length 236 [2021-12-18 05:23:48,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:48,237 INFO L470 AbstractCegarLoop]: Abstraction has 10972 states and 16068 transitions. [2021-12-18 05:23:48,238 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-12-18 05:23:48,238 INFO L276 IsEmpty]: Start isEmpty. Operand 10972 states and 16068 transitions. [2021-12-18 05:23:48,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2021-12-18 05:23:48,255 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:48,255 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:48,289 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:48,479 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:48,479 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:48,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:48,480 INFO L85 PathProgramCache]: Analyzing trace with hash 1323405944, now seen corresponding path program 1 times [2021-12-18 05:23:48,481 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:48,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1343294006] [2021-12-18 05:23:48,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:48,482 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:48,482 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:48,484 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:48,487 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-12-18 05:23:49,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:49,709 INFO L263 TraceCheckSpWp]: Trace formula consists of 1550 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:23:49,714 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:51,885 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 108 proven. 0 refuted. 0 times theorem prover too weak. 212 trivial. 0 not checked. [2021-12-18 05:23:51,886 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:51,886 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:51,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1343294006] [2021-12-18 05:23:51,886 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1343294006] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:51,886 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:51,887 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 05:23:51,887 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1573528624] [2021-12-18 05:23:51,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:51,887 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:23:51,887 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:51,888 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:23:51,888 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:51,888 INFO L87 Difference]: Start difference. First operand 10972 states and 16068 transitions. Second operand has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 3 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-18 05:23:52,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:52,723 INFO L93 Difference]: Finished difference Result 32416 states and 47500 transitions. [2021-12-18 05:23:52,724 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:23:52,724 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 3 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) Word has length 236 [2021-12-18 05:23:52,724 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:52,815 INFO L225 Difference]: With dead ends: 32416 [2021-12-18 05:23:52,815 INFO L226 Difference]: Without dead ends: 21467 [2021-12-18 05:23:52,859 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 234 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:23:52,860 INFO L933 BasicCegarLoop]: 3966 mSDtfsCounter, 2107 mSDsluCounter, 2212 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2107 SdHoareTripleChecker+Valid, 6178 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:52,860 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2107 Valid, 6178 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-18 05:23:52,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21467 states. [2021-12-18 05:23:53,645 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21467 to 21461. [2021-12-18 05:23:53,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21461 states, 15137 states have (on average 1.3973706811125057) internal successors, (21152), 15947 states have internal predecessors, (21152), 4975 states have call successors, (4975), 1328 states have call predecessors, (4975), 1348 states have return successors, (5305), 4569 states have call predecessors, (5305), 4973 states have call successors, (5305) [2021-12-18 05:23:53,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21461 states to 21461 states and 31432 transitions. [2021-12-18 05:23:53,754 INFO L78 Accepts]: Start accepts. Automaton has 21461 states and 31432 transitions. Word has length 236 [2021-12-18 05:23:53,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:53,755 INFO L470 AbstractCegarLoop]: Abstraction has 21461 states and 31432 transitions. [2021-12-18 05:23:53,755 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 38.666666666666664) internal successors, (116), 3 states have internal predecessors, (116), 3 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (21), 2 states have call predecessors, (21), 2 states have call successors, (21) [2021-12-18 05:23:53,755 INFO L276 IsEmpty]: Start isEmpty. Operand 21461 states and 31432 transitions. [2021-12-18 05:23:53,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 263 [2021-12-18 05:23:53,795 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:53,796 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:53,831 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:54,015 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:54,016 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:54,016 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:54,016 INFO L85 PathProgramCache]: Analyzing trace with hash 670401594, now seen corresponding path program 1 times [2021-12-18 05:23:54,017 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:54,017 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [720321787] [2021-12-18 05:23:54,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:54,018 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:54,018 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:54,019 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:54,020 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-12-18 05:23:55,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:55,086 INFO L263 TraceCheckSpWp]: Trace formula consists of 1635 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-18 05:23:55,091 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:23:56,585 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 238 trivial. 0 not checked. [2021-12-18 05:23:56,585 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:23:56,585 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:23:56,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [720321787] [2021-12-18 05:23:56,585 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [720321787] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:23:56,585 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:23:56,585 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-18 05:23:56,585 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1565428334] [2021-12-18 05:23:56,585 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:23:56,586 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-18 05:23:56,586 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:23:56,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-18 05:23:56,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-18 05:23:56,587 INFO L87 Difference]: Start difference. First operand 21461 states and 31432 transitions. Second operand has 5 states, 5 states have (on average 24.6) internal successors, (123), 5 states have internal predecessors, (123), 3 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) [2021-12-18 05:23:57,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:23:57,498 INFO L93 Difference]: Finished difference Result 34898 states and 51048 transitions. [2021-12-18 05:23:57,499 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-18 05:23:57,499 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 24.6) internal successors, (123), 5 states have internal predecessors, (123), 3 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) Word has length 262 [2021-12-18 05:23:57,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:23:57,562 INFO L225 Difference]: With dead ends: 34898 [2021-12-18 05:23:57,563 INFO L226 Difference]: Without dead ends: 13281 [2021-12-18 05:23:57,617 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 258 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-18 05:23:57,617 INFO L933 BasicCegarLoop]: 2257 mSDtfsCounter, 15 mSDsluCounter, 6748 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 9005 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-18 05:23:57,617 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 9005 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-18 05:23:57,633 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13281 states. [2021-12-18 05:23:58,312 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13281 to 13271. [2021-12-18 05:23:58,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13271 states, 9348 states have (on average 1.3949507916131794) internal successors, (13040), 9851 states have internal predecessors, (13040), 3077 states have call successors, (3077), 834 states have call predecessors, (3077), 845 states have return successors, (3277), 2819 states have call predecessors, (3277), 3075 states have call successors, (3277) [2021-12-18 05:23:58,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13271 states to 13271 states and 19394 transitions. [2021-12-18 05:23:58,377 INFO L78 Accepts]: Start accepts. Automaton has 13271 states and 19394 transitions. Word has length 262 [2021-12-18 05:23:58,377 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:23:58,378 INFO L470 AbstractCegarLoop]: Abstraction has 13271 states and 19394 transitions. [2021-12-18 05:23:58,378 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 24.6) internal successors, (123), 5 states have internal predecessors, (123), 3 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 3 states have call predecessors, (24), 3 states have call successors, (24) [2021-12-18 05:23:58,378 INFO L276 IsEmpty]: Start isEmpty. Operand 13271 states and 19394 transitions. [2021-12-18 05:23:58,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 291 [2021-12-18 05:23:58,405 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:23:58,405 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:23:58,429 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (17)] Forceful destruction successful, exit code 0 [2021-12-18 05:23:58,605 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:23:58,606 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:23:58,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:23:58,606 INFO L85 PathProgramCache]: Analyzing trace with hash 1317793432, now seen corresponding path program 1 times [2021-12-18 05:23:58,608 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:23:58,608 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1928180936] [2021-12-18 05:23:58,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:23:58,608 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:23:58,608 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:23:58,609 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:23:58,610 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-12-18 05:23:59,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:23:59,734 INFO L263 TraceCheckSpWp]: Trace formula consists of 1777 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:23:59,739 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:24:01,942 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-18 05:24:01,943 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:24:01,943 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:24:01,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1928180936] [2021-12-18 05:24:01,943 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1928180936] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:24:01,944 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:24:01,944 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 05:24:01,944 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1758170742] [2021-12-18 05:24:01,944 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:24:01,945 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:24:01,945 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:24:01,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:24:01,946 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:24:01,946 INFO L87 Difference]: Start difference. First operand 13271 states and 19394 transitions. Second operand has 3 states, 3 states have (on average 54.0) internal successors, (162), 3 states have internal predecessors, (162), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:24:02,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:24:02,470 INFO L93 Difference]: Finished difference Result 26489 states and 38714 transitions. [2021-12-18 05:24:02,471 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:24:02,471 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 54.0) internal successors, (162), 3 states have internal predecessors, (162), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 290 [2021-12-18 05:24:02,471 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:24:02,538 INFO L225 Difference]: With dead ends: 26489 [2021-12-18 05:24:02,539 INFO L226 Difference]: Without dead ends: 13251 [2021-12-18 05:24:02,573 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 288 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:24:02,574 INFO L933 BasicCegarLoop]: 2256 mSDtfsCounter, 2244 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2244 SdHoareTripleChecker+Valid, 2256 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 05:24:02,575 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2244 Valid, 2256 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 05:24:02,583 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13251 states. [2021-12-18 05:24:03,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13251 to 13251. [2021-12-18 05:24:03,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13251 states, 9338 states have (on average 1.394302848575712) internal successors, (13020), 9841 states have internal predecessors, (13020), 3067 states have call successors, (3067), 834 states have call predecessors, (3067), 845 states have return successors, (3262), 2809 states have call predecessors, (3262), 3065 states have call successors, (3262) [2021-12-18 05:24:03,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13251 states to 13251 states and 19349 transitions. [2021-12-18 05:24:03,180 INFO L78 Accepts]: Start accepts. Automaton has 13251 states and 19349 transitions. Word has length 290 [2021-12-18 05:24:03,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:24:03,180 INFO L470 AbstractCegarLoop]: Abstraction has 13251 states and 19349 transitions. [2021-12-18 05:24:03,180 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 54.0) internal successors, (162), 3 states have internal predecessors, (162), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:24:03,180 INFO L276 IsEmpty]: Start isEmpty. Operand 13251 states and 19349 transitions. [2021-12-18 05:24:03,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 289 [2021-12-18 05:24:03,208 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:24:03,209 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:24:03,236 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (18)] Ended with exit code 0 [2021-12-18 05:24:03,410 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:24:03,410 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:24:03,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:24:03,411 INFO L85 PathProgramCache]: Analyzing trace with hash -372139879, now seen corresponding path program 1 times [2021-12-18 05:24:03,412 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:24:03,412 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [905274183] [2021-12-18 05:24:03,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:24:03,412 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:24:03,412 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:24:03,413 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:24:03,415 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (19)] Waiting until timeout for monitored process [2021-12-18 05:24:04,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:24:04,467 INFO L263 TraceCheckSpWp]: Trace formula consists of 1773 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:24:04,471 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:24:06,614 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-18 05:24:06,614 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:24:06,615 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:24:06,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [905274183] [2021-12-18 05:24:06,615 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [905274183] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:24:06,615 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:24:06,615 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 05:24:06,615 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1701015602] [2021-12-18 05:24:06,615 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:24:06,616 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:24:06,616 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:24:06,617 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:24:06,617 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:24:06,617 INFO L87 Difference]: Start difference. First operand 13251 states and 19349 transitions. Second operand has 3 states, 3 states have (on average 53.333333333333336) internal successors, (160), 3 states have internal predecessors, (160), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:24:07,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:24:07,125 INFO L93 Difference]: Finished difference Result 26449 states and 38624 transitions. [2021-12-18 05:24:07,125 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:24:07,125 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 53.333333333333336) internal successors, (160), 3 states have internal predecessors, (160), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 288 [2021-12-18 05:24:07,126 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:24:07,175 INFO L225 Difference]: With dead ends: 26449 [2021-12-18 05:24:07,176 INFO L226 Difference]: Without dead ends: 13231 [2021-12-18 05:24:07,210 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 287 GetRequests, 286 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:24:07,211 INFO L933 BasicCegarLoop]: 2252 mSDtfsCounter, 2242 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2242 SdHoareTripleChecker+Valid, 2252 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 05:24:07,211 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2242 Valid, 2252 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 05:24:07,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13231 states. [2021-12-18 05:24:07,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13231 to 13231. [2021-12-18 05:24:07,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13231 states, 9328 states have (on average 1.3936535162950257) internal successors, (13000), 9831 states have internal predecessors, (13000), 3057 states have call successors, (3057), 834 states have call predecessors, (3057), 845 states have return successors, (3247), 2799 states have call predecessors, (3247), 3055 states have call successors, (3247) [2021-12-18 05:24:07,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13231 states to 13231 states and 19304 transitions. [2021-12-18 05:24:07,799 INFO L78 Accepts]: Start accepts. Automaton has 13231 states and 19304 transitions. Word has length 288 [2021-12-18 05:24:07,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:24:07,800 INFO L470 AbstractCegarLoop]: Abstraction has 13231 states and 19304 transitions. [2021-12-18 05:24:07,800 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 53.333333333333336) internal successors, (160), 3 states have internal predecessors, (160), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:24:07,800 INFO L276 IsEmpty]: Start isEmpty. Operand 13231 states and 19304 transitions. [2021-12-18 05:24:07,829 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 290 [2021-12-18 05:24:07,830 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:24:07,830 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:24:07,874 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (19)] Forceful destruction successful, exit code 0 [2021-12-18 05:24:08,051 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:24:08,052 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:24:08,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:24:08,052 INFO L85 PathProgramCache]: Analyzing trace with hash 1188301001, now seen corresponding path program 1 times [2021-12-18 05:24:08,053 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:24:08,053 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1540370904] [2021-12-18 05:24:08,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:24:08,054 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:24:08,054 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:24:08,055 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:24:08,058 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (20)] Waiting until timeout for monitored process [2021-12-18 05:24:09,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:24:09,127 INFO L263 TraceCheckSpWp]: Trace formula consists of 1775 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:24:09,131 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:24:11,359 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-18 05:24:11,359 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:24:11,359 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:24:11,359 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1540370904] [2021-12-18 05:24:11,359 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1540370904] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:24:11,359 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:24:11,359 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 05:24:11,360 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1152459555] [2021-12-18 05:24:11,360 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:24:11,360 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:24:11,360 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:24:11,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:24:11,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:24:11,361 INFO L87 Difference]: Start difference. First operand 13231 states and 19304 transitions. Second operand has 3 states, 3 states have (on average 53.666666666666664) internal successors, (161), 3 states have internal predecessors, (161), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:24:11,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:24:11,799 INFO L93 Difference]: Finished difference Result 26409 states and 38534 transitions. [2021-12-18 05:24:11,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:24:11,800 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 53.666666666666664) internal successors, (161), 3 states have internal predecessors, (161), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 289 [2021-12-18 05:24:11,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:24:11,848 INFO L225 Difference]: With dead ends: 26409 [2021-12-18 05:24:11,849 INFO L226 Difference]: Without dead ends: 13211 [2021-12-18 05:24:11,881 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 287 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:24:11,882 INFO L933 BasicCegarLoop]: 2248 mSDtfsCounter, 2237 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2237 SdHoareTripleChecker+Valid, 2248 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 05:24:11,882 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2237 Valid, 2248 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 05:24:11,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13211 states. [2021-12-18 05:24:12,488 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13211 to 13211. [2021-12-18 05:24:12,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13211 states, 9318 states have (on average 1.3930027902983473) internal successors, (12980), 9821 states have internal predecessors, (12980), 3047 states have call successors, (3047), 834 states have call predecessors, (3047), 845 states have return successors, (3232), 2789 states have call predecessors, (3232), 3045 states have call successors, (3232) [2021-12-18 05:24:12,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13211 states to 13211 states and 19259 transitions. [2021-12-18 05:24:12,552 INFO L78 Accepts]: Start accepts. Automaton has 13211 states and 19259 transitions. Word has length 289 [2021-12-18 05:24:12,553 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:24:12,553 INFO L470 AbstractCegarLoop]: Abstraction has 13211 states and 19259 transitions. [2021-12-18 05:24:12,553 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 53.666666666666664) internal successors, (161), 3 states have internal predecessors, (161), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:24:12,553 INFO L276 IsEmpty]: Start isEmpty. Operand 13211 states and 19259 transitions. [2021-12-18 05:24:12,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2021-12-18 05:24:12,577 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:24:12,577 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:24:12,604 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (20)] Forceful destruction successful, exit code 0 [2021-12-18 05:24:12,778 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:24:12,778 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:24:12,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:24:12,779 INFO L85 PathProgramCache]: Analyzing trace with hash 37556904, now seen corresponding path program 1 times [2021-12-18 05:24:12,780 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:24:12,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1565762180] [2021-12-18 05:24:12,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:24:12,781 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:24:12,781 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:24:12,782 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:24:12,783 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (21)] Waiting until timeout for monitored process [2021-12-18 05:24:13,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-18 05:24:13,874 INFO L263 TraceCheckSpWp]: Trace formula consists of 1779 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-18 05:24:13,879 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-18 05:24:16,082 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-12-18 05:24:16,082 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-18 05:24:16,082 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-18 05:24:16,082 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1565762180] [2021-12-18 05:24:16,082 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1565762180] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-18 05:24:16,083 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-18 05:24:16,083 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-18 05:24:16,083 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1902335755] [2021-12-18 05:24:16,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-18 05:24:16,083 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-18 05:24:16,083 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-18 05:24:16,084 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-18 05:24:16,084 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:24:16,084 INFO L87 Difference]: Start difference. First operand 13211 states and 19259 transitions. Second operand has 3 states, 3 states have (on average 54.333333333333336) internal successors, (163), 3 states have internal predecessors, (163), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:24:16,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-18 05:24:16,657 INFO L93 Difference]: Finished difference Result 26369 states and 38444 transitions. [2021-12-18 05:24:16,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-18 05:24:16,658 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 54.333333333333336) internal successors, (163), 3 states have internal predecessors, (163), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 291 [2021-12-18 05:24:16,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-18 05:24:16,706 INFO L225 Difference]: With dead ends: 26369 [2021-12-18 05:24:16,707 INFO L226 Difference]: Without dead ends: 13191 [2021-12-18 05:24:16,738 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 290 GetRequests, 289 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-18 05:24:16,739 INFO L933 BasicCegarLoop]: 2244 mSDtfsCounter, 2231 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2231 SdHoareTripleChecker+Valid, 2244 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-18 05:24:16,741 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2231 Valid, 2244 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-18 05:24:16,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13191 states. [2021-12-18 05:24:17,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13191 to 13191. [2021-12-18 05:24:17,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13191 states, 9308 states have (on average 1.3923506660936829) internal successors, (12960), 9811 states have internal predecessors, (12960), 3037 states have call successors, (3037), 834 states have call predecessors, (3037), 845 states have return successors, (3217), 2779 states have call predecessors, (3217), 3035 states have call successors, (3217) [2021-12-18 05:24:17,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13191 states to 13191 states and 19214 transitions. [2021-12-18 05:24:17,329 INFO L78 Accepts]: Start accepts. Automaton has 13191 states and 19214 transitions. Word has length 291 [2021-12-18 05:24:17,330 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-18 05:24:17,330 INFO L470 AbstractCegarLoop]: Abstraction has 13191 states and 19214 transitions. [2021-12-18 05:24:17,330 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 54.333333333333336) internal successors, (163), 3 states have internal predecessors, (163), 2 states have call successors, (35), 2 states have call predecessors, (35), 2 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-12-18 05:24:17,330 INFO L276 IsEmpty]: Start isEmpty. Operand 13191 states and 19214 transitions. [2021-12-18 05:24:17,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-12-18 05:24:17,345 INFO L506 BasicCegarLoop]: Found error trace [2021-12-18 05:24:17,346 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:24:17,373 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (21)] Forceful destruction successful, exit code 0 [2021-12-18 05:24:17,546 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:24:17,547 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-18 05:24:17,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-18 05:24:17,547 INFO L85 PathProgramCache]: Analyzing trace with hash -1842326138, now seen corresponding path program 1 times [2021-12-18 05:24:17,548 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-18 05:24:17,548 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [60611899] [2021-12-18 05:24:17,548 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-18 05:24:17,548 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-18 05:24:17,549 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-18 05:24:17,549 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-18 05:24:17,551 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (22)] Waiting until timeout for monitored process [2021-12-18 05:24:22,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 05:24:22,042 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-18 05:24:27,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-18 05:24:28,387 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-18 05:24:28,387 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-18 05:24:28,388 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-18 05:24:28,437 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (22)] Ended with exit code 0 [2021-12-18 05:24:28,590 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-18 05:24:28,594 INFO L732 BasicCegarLoop]: Path program histogram: [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-18 05:24:28,597 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-18 05:24:28,694 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-18 05:24:28,699 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-18 05:24:29,177 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.12 05:24:29 BoogieIcfgContainer [2021-12-18 05:24:29,178 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-18 05:24:29,179 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-18 05:24:29,179 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-18 05:24:29,179 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-18 05:24:29,179 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.12 05:22:36" (3/4) ... [2021-12-18 05:24:29,182 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-18 05:24:29,182 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-18 05:24:29,183 INFO L158 Benchmark]: Toolchain (without parser) took 165315.95ms. Allocated memory was 56.6MB in the beginning and 2.8GB in the end (delta: 2.7GB). Free memory was 36.5MB in the beginning and 1.8GB in the end (delta: -1.7GB). Peak memory consumption was 1.0GB. Max. memory is 16.1GB. [2021-12-18 05:24:29,183 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 56.6MB. Free memory was 39.2MB in the beginning and 39.1MB in the end (delta: 50.7kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 05:24:29,184 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2420.81ms. Allocated memory was 56.6MB in the beginning and 201.3MB in the end (delta: 144.7MB). Free memory was 36.2MB in the beginning and 130.3MB in the end (delta: -94.1MB). Peak memory consumption was 62.7MB. Max. memory is 16.1GB. [2021-12-18 05:24:29,184 INFO L158 Benchmark]: Boogie Procedure Inliner took 222.22ms. Allocated memory is still 201.3MB. Free memory was 130.3MB in the beginning and 105.1MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2021-12-18 05:24:29,187 INFO L158 Benchmark]: Boogie Preprocessor took 275.17ms. Allocated memory is still 201.3MB. Free memory was 105.1MB in the beginning and 110.7MB in the end (delta: -5.6MB). Peak memory consumption was 22.6MB. Max. memory is 16.1GB. [2021-12-18 05:24:29,188 INFO L158 Benchmark]: RCFGBuilder took 49699.26ms. Allocated memory was 201.3MB in the beginning and 402.7MB in the end (delta: 201.3MB). Free memory was 110.7MB in the beginning and 178.9MB in the end (delta: -68.2MB). Peak memory consumption was 151.0MB. Max. memory is 16.1GB. [2021-12-18 05:24:29,188 INFO L158 Benchmark]: TraceAbstraction took 112684.43ms. Allocated memory was 402.7MB in the beginning and 2.8GB in the end (delta: 2.4GB). Free memory was 178.9MB in the beginning and 1.8GB in the end (delta: -1.6GB). Peak memory consumption was 795.9MB. Max. memory is 16.1GB. [2021-12-18 05:24:29,189 INFO L158 Benchmark]: Witness Printer took 3.94ms. Allocated memory is still 2.8GB. Free memory is still 1.8GB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-18 05:24:29,193 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 56.6MB. Free memory was 39.2MB in the beginning and 39.1MB in the end (delta: 50.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2420.81ms. Allocated memory was 56.6MB in the beginning and 201.3MB in the end (delta: 144.7MB). Free memory was 36.2MB in the beginning and 130.3MB in the end (delta: -94.1MB). Peak memory consumption was 62.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 222.22ms. Allocated memory is still 201.3MB. Free memory was 130.3MB in the beginning and 105.1MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 275.17ms. Allocated memory is still 201.3MB. Free memory was 105.1MB in the beginning and 110.7MB in the end (delta: -5.6MB). Peak memory consumption was 22.6MB. Max. memory is 16.1GB. * RCFGBuilder took 49699.26ms. Allocated memory was 201.3MB in the beginning and 402.7MB in the end (delta: 201.3MB). Free memory was 110.7MB in the beginning and 178.9MB in the end (delta: -68.2MB). Peak memory consumption was 151.0MB. Max. memory is 16.1GB. * TraceAbstraction took 112684.43ms. Allocated memory was 402.7MB in the beginning and 2.8GB in the end (delta: 2.4GB). Free memory was 178.9MB in the beginning and 1.8GB in the end (delta: -1.6GB). Peak memory consumption was 795.9MB. Max. memory is 16.1GB. * Witness Printer took 3.94ms. Allocated memory is still 2.8GB. Free memory is still 1.8GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8151]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6893. Possible FailurePath: [L4340] int ldv_timer_state_5 = 0; [L4341] struct timer_list *ldv_timer_list_5 ; [L4342] struct timer_list *ldv_timer_list_4 ; [L4343] struct work_struct *ldv_work_struct_3_1 ; [L4344] struct mmc_host *vub300_mmc_ops_group0 ; [L4345] struct work_struct *ldv_work_struct_1_3 ; [L4346] int ldv_state_variable_0 ; [L4347] int ldv_state_variable_5 ; [L4348] int ldv_work_1_1 ; [L4349] int ldv_work_3_2 ; [L4350] int ldv_work_3_0 ; [L4351] struct work_struct *ldv_work_struct_2_3 ; [L4352] struct work_struct *ldv_work_struct_2_0 ; [L4353] struct work_struct *ldv_work_struct_2_2 ; [L4354] int ldv_timer_state_4 = 0; [L4355] int ref_cnt ; [L4356] int ldv_work_3_3 ; [L4357] int ldv_state_variable_1 ; [L4358] int ldv_state_variable_7 ; [L4359] struct work_struct *ldv_work_struct_3_3 ; [L4360] struct work_struct *ldv_work_struct_1_0 ; [L4361] struct work_struct *ldv_work_struct_1_1 ; [L4362] int ldv_work_1_3 ; [L4363] struct work_struct *ldv_work_struct_2_1 ; [L4364] struct work_struct *ldv_work_struct_3_2 ; [L4365] int ldv_state_variable_6 ; [L4366] int ldv_work_3_1 ; [L4367] int ldv_state_variable_2 ; [L4368] int ldv_work_2_0 ; [L4369] int usb_counter ; [L4370] struct work_struct *ldv_work_struct_3_0 ; [L4371] int ldv_work_1_2 ; [L4372] int LDV_IN_INTERRUPT = 1; [L4373] struct work_struct *ldv_work_struct_1_2 ; [L4374] int ldv_work_2_2 ; [L4375] int ldv_state_variable_3 ; [L4376] struct usb_interface *vub300_driver_group1 ; [L4377] int ldv_work_1_0 ; [L4378] int ldv_work_2_3 ; [L4379] int ldv_state_variable_4 ; [L4380] int ldv_work_2_1 ; [L4437] static bool limit_speed_to_24_MHz ; [L4438] static bool pad_input_to_usb_pkt ; [L4439] static bool disable_offload_processing ; [L4440] static bool force_1_bit_data_xfers ; [L4441] static bool force_polling_for_irqs ; [L4442] static int firmware_irqpoll_timeout = 1024; [L4443] static int force_max_req_size = 128; [L4444] static int firmware_rom_wait_states = 28; [L4445-L4450] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4451] struct usb_device_id const __mod_usb_device_table ; [L4452] static struct workqueue_struct *cmndworkqueue ; [L4453] static struct workqueue_struct *pollworkqueue ; [L4454] static struct workqueue_struct *deadworkqueue ; [L6440-L6442] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6853-L6859] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6932] int ldv_retval_0 ; [L6933] int ldv_retval_1 ; [L6937] int ldv_retval_3 ; [L6938] int ldv_retval_2 ; [L8154] int URB_STATE = 0; [L8155] int DEV_STATE = 0; [L8156] int INTERF_STATE = 0; [L8157] int SERIAL_STATE = 0; [L8158] void *usb_intfdata = (void *)0; [L8159] struct urb *int_urb = (struct urb *)0; [L8160] struct urb *bulk_urb = (struct urb *)0; [L8161] void (*completeFnInt)(struct urb * ) ; [L8162] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7530] struct usb_device_id *ldvarg1 ; [L7531] void *tmp ; [L7532] pm_message_t ldvarg0 ; [L7533] struct mmc_card *ldvarg4 ; [L7534] void *tmp___0 ; [L7535] struct mmc_ios *ldvarg3 ; [L7536] void *tmp___1 ; [L7537] int ldvarg5 ; [L7538] struct mmc_request *ldvarg2 ; [L7539] void *tmp___2 ; [L7540] int tmp___3 ; [L7541] int tmp___4 ; [L7542] int tmp___5 ; [L7543] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4029032789254336481:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4029032789254336481:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4029032789254336481:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={4029032789254336481:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4029032789254336481:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4029032789254336481:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={4029032789254336481:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={4029032789254336481:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4029032789254336481:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4029032789254336481:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={4029032789254336481:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={4029032789254336481:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7545] tmp = ldv_init_zalloc(32UL) [L7546] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] CALL, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={5800917767439556513:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={5800917767439556513:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={5800917767439556513:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={5800917767439556513:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={5800917767439556513:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={5800917767439556513:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={5800917767439556513:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1824, \result={5800917767439556513:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={5800917767439556513:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={5800917767439556513:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={5800917767439556513:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] RET, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1824UL)={5800917767439556513:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7547] tmp___0 = ldv_init_zalloc(1824UL) [L7548] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8107042251637314913:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8107042251637314913:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={8107042251637314913:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={8107042251637314913:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8107042251637314913:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={8107042251637314913:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={8107042251637314913:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={8107042251637314913:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8107042251637314913:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={8107042251637314913:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={8107042251637314913:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={8107042251637314913:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7549] tmp___1 = ldv_init_zalloc(16UL) [L7550] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8251157439711075681:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8251157439711075681:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={8251157439711075681:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={8251157439711075681:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8251157439711075681:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={8251157439711075681:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={8251157439711075681:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={8251157439711075681:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8251157439711075681:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={8251157439711075681:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={8251157439711075681:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={8251157439711075681:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7551] tmp___2 = ldv_init_zalloc(136UL) [L7552] ldvarg2 = (struct mmc_request *)tmp___2 [L7553] FCALL ldv_initialize() [L7554] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-395753844837200528:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-395753844837200528:0}, s={-395753844837200528:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-395753844837200528:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-395753844837200528:0}, s={-395753844837200528:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-395753844837200528:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-395753844837200528:0}, s={-395753844837200528:0}, SERIAL_STATE=0, tmp={-395753844837200528:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7554] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={-395753844837200528:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7555] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-2989827230202536607:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-2989827230202536607:0}, s={-2989827230202536607:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-2989827230202536607:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-2989827230202536607:0}, s={-2989827230202536607:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-2989827230202536607:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-2989827230202536607:0}, s={-2989827230202536607:0}, SERIAL_STATE=0, tmp={-2989827230202536607:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7555] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={-2989827230202536607:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7556] ldv_state_variable_6 = 0 [L7557] CALL work_init_3() [L6942] ldv_work_3_0 = 0 [L6943] ldv_work_3_1 = 0 [L6944] ldv_work_3_2 = 0 [L6945] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7557] RET work_init_3() [L7558] ldv_state_variable_3 = 1 [L7559] ldv_state_variable_7 = 0 [L7560] CALL work_init_2() [L6992] ldv_work_2_0 = 0 [L6993] ldv_work_2_1 = 0 [L6994] ldv_work_2_2 = 0 [L6995] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7560] RET work_init_2() [L7561] ldv_state_variable_2 = 1 [L7562] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7562] RET work_init_1() [L7563] ldv_state_variable_1 = 1 [L7564] ldv_state_variable_4 = 1 [L7565] ref_cnt = 0 [L7566] ldv_state_variable_0 = 1 [L7567] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, tmp___3=6, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: [L7716] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7717] COND TRUE ldv_state_variable_0 == 1 [L7718] CALL, EXPR vub300_init() [L6862] int result ; [L6863] struct lock_class_key __key ; [L6864] char const *__lock_name ; [L6865] struct workqueue_struct *tmp ; [L6866] struct lock_class_key __key___0 ; [L6867] char const *__lock_name___0 ; [L6868] struct workqueue_struct *tmp___0 ; [L6869] struct lock_class_key __key___1 ; [L6870] char const *__lock_name___1 ; [L6871] struct workqueue_struct *tmp___1 ; [L6875] __lock_name = "kvub300c" [L6876] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6877] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-9223372036850581504:0}, __key={-573995058391163418:0}, __key___0={-2312597858880434160:0}, __key___1={-972777519493366120:0}, __lock_name={74:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036850581504:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6878] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] __lock_name___0 = "kvub300p" [L6885] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6886] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-9223372036850581504:0}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372028264841216:0}, __key={-573995058391163418:0}, __key___0={-2312597858880434160:0}, __key___1={-972777519493366120:0}, __lock_name={74:0}, __lock_name___0={77:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036850581504:0}, tmp___0={-9223372028264841216:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6887] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6893] __lock_name___1 = "kvub300d" [L6894] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6895] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-9223372036850581504:0}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={-9223372028264841216:1099511627776}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372028264841216:0}, __key={-573995058391163418:0}, __key___0={-2312597858880434160:0}, __key___1={-972777519493366120:0}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-9223372036850581504:0}, tmp___0={-9223372028264841216:0}, tmp___1={-9223372028264841216:1099511627776}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6896] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6902] CALL, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L8056] ldv_func_ret_type___13 ldv_func_res ; [L8057] int tmp ; [L8059] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8538] return __VERIFIER_nondet_int(); [L8059] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8059] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8060] ldv_func_res = tmp [L8061] ldv_state_variable_6 = 1 [L8062] usb_counter = 0 [L8063] CALL ldv_usb_driver_6() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={7963490013514882401:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={7963490013514882401:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={7963490013514882401:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={7963490013514882401:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, cond=1, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={7963490013514882401:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={7963490013514882401:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={7963490013514882401:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={7963490013514882401:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={7963490013514882401:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={7963490013514882401:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={7963490013514882401:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={7963490013514882401:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={7963490013514882401:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L8063] RET ldv_usb_driver_6() [L8064] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={87:0}, ldv_func_arg1={87:0}, ldv_func_arg2={94:93}, ldv_func_arg2={94:93}, ldv_func_arg3={83:0}, ldv_func_arg3={83:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L6902] RET, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6902] result = ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6903] COND FALSE !(result != 0) [L6908] return (0); [L6908] return (0); [L6908] return (0); [L6908] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-9223372036850581504:0}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={-9223372028264841216:1099511627776}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372028264841216:0}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={-9223372036850581504:0}, tmp___0={-9223372028264841216:0}, tmp___1={-9223372028264841216:1099511627776}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7718] RET, EXPR vub300_init() [L7718] ldv_retval_3 = vub300_init() [L7719] COND TRUE ldv_retval_3 == 0 [L7720] ldv_state_variable_0 = 3 [L7721] ldv_state_variable_7 = 1 [L7722] CALL ldv_initialize_mmc_host_ops_7() [L7001] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={4504162549740658145:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={4504162549740658145:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4504162549740658145:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={4504162549740658145:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, cond=1, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={4504162549740658145:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4504162549740658145:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={4504162549740658145:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={4504162549740658145:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={4504162549740658145:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4504162549740658145:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={4504162549740658145:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={4504162549740658145:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={0:0}, vub300_table={85:0}] [L7003] tmp = ldv_init_zalloc(2624UL) [L7004] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4504162549740658145:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7722] RET ldv_initialize_mmc_host_ops_7() [L7725] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, tmp___3=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7572] COND TRUE ldv_state_variable_6 != 0 [L7573] tmp___4 = __VERIFIER_nondet_int() [L7575] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7576] COND TRUE ldv_state_variable_6 == 1 [L7577] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6445] struct vub300_mmc_host *vub300 ; [L6446] struct usb_host_interface *iface_desc ; [L6447] struct usb_device *udev ; [L6448] struct usb_device *tmp ; [L6449] struct usb_device *tmp___0 ; [L6450] int i ; [L6451] int retval ; [L6452] struct urb *command_out_urb ; [L6453] struct urb *command_res_urb ; [L6454] struct mmc_host *mmc ; [L6455] char manufacturer[48U] ; [L6456] char product[32U] ; [L6457] char serial_number[32U] ; [L6458] void *tmp___1 ; [L6459] struct lock_class_key __key ; [L6460] struct lock_class_key __key___0 ; [L6461] int tmp___2 ; [L6462] struct usb_endpoint_descriptor *endpoint ; [L6463] int tmp___4 ; [L6464] char *tmp___5 ; [L6465] int tmp___6 ; [L6466] int tmp___7 ; [L6467] int tmp___8 ; [L6468] unsigned int tmp___9 ; [L6469] unsigned int tmp___10 ; [L6470] unsigned int tmp___11 ; [L6471] struct lock_class_key __key___1 ; [L6472] atomic_long_t __constr_expr_0 ; [L6473] struct lock_class_key __key___2 ; [L6474] struct lock_class_key __key___3 ; [L6475] atomic_long_t __constr_expr_1 ; [L6476] struct lock_class_key __key___4 ; [L6477] atomic_long_t __constr_expr_2 ; [L6478] int tmp___12 ; [L6479] int tmp___13 ; [L6481] CALL, EXPR interface_to_usbdev(interface) [L7799] struct usb_device *tmp ; [L7801] CALL, EXPR ldv_interface_to_usbdev() [L8277] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8282] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND FALSE !(tmp___0 != 0) [L4268] tmp = malloc(size) [L4269] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={37154971803713537:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={37154971803713537:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L4270] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, cond=1, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L4270] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={37154971803713537:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={37154971803713537:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L4271] return (p); VAL [={0:0}, ={0:0}, \old(size)=1672, \result={37154971803713537:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={37154971803713537:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={37154971803713537:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8282] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={37154971803713537:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8282] result = ldv_malloc(sizeof(struct usb_device)) [L8283] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8287] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={37154971803713537:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, result={37154971803713537:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7801] RET, EXPR ldv_interface_to_usbdev() [L7801] tmp = ldv_interface_to_usbdev() [L7802] return (tmp); VAL [={0:0}, ={0:0}, \result={37154971803713537:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={7963490013514882401:0}, intf={7963490013514882401:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={37154971803713537:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6481] RET, EXPR interface_to_usbdev(interface) [L6481] tmp = interface_to_usbdev(interface) [L6482] CALL, EXPR ldv_usb_get_dev_44(tmp) [L7996] CALL ldv_get_dev(ldv_func_arg1) [L8293] DEV_STATE = DEV_STATE + 1 [L8294] return (data); VAL [={0:0}, ={0:0}, \result={37154971803713537:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, data={37154971803713537:0}, data={37154971803713537:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7996] RET ldv_get_dev(ldv_func_arg1) [L7997] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={37154971803713537:0}, ldv_func_arg1={37154971803713537:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6482] RET, EXPR ldv_usb_get_dev_44(tmp) [L6482] tmp___0 = ldv_usb_get_dev_44(tmp) [L6483] udev = tmp___0 [L6484] retval = -12 [L6485] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={-2985323630575198863:0}, __constr_expr_1={-6755399418020701:0}, __constr_expr_2={-2985323630575198879:0}, __key={-44473073710144285:0}, __key___0={-828099409065746975:0}, __key___1={-9007199253946384:0}, __key___2={-6754849664452887:0}, __key___3={-6755399422214937:0}, __key___4={-6755399420456317:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={4029032789254336481:0}, id={4029032789254336481:0}, int_urb={0:0}, INTERF_STATE=0, interface={7963490013514882401:0}, interface={7963490013514882401:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-2312597858880434160:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, product={-2985323630575166111:0}, ref_cnt=0, retval=4294967284, serial_number={-395753844837130911:0}, SERIAL_STATE=0, tmp={37154971803713537:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6485-L6486] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=32, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={-2312597858880434160:0}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6485-L6486] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-2985323630575198863:0}, __constr_expr_1={-6755399418020701:0}, __constr_expr_2={-2985323630575198879:0}, __key={-44473073710144285:0}, __key___0={-828099409065746975:0}, __key___1={-9007199253946384:0}, __key___2={-6754849664452887:0}, __key___3={-6755399422214937:0}, __key___4={-6755399420456317:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={4029032789254336481:0}, id={4029032789254336481:0}, int_urb={0:0}, INTERF_STATE=0, interface={7963490013514882401:0}, interface={7963490013514882401:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-2312597858880434160:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, product={-2985323630575166111:0}, ref_cnt=0, retval=4294967284, serial_number={-395753844837130911:0}, SERIAL_STATE=0, tmp={37154971803713537:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=94, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6487] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={-2985323630575198863:0}, __constr_expr_1={-6755399418020701:0}, __constr_expr_2={-2985323630575198879:0}, __key={-44473073710144285:0}, __key___0={-828099409065746975:0}, __key___1={-9007199253946384:0}, __key___2={-6754849664452887:0}, __key___3={-6755399422214937:0}, __key___4={-6755399420456317:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={4029032789254336481:0}, id={4029032789254336481:0}, int_urb={0:0}, INTERF_STATE=0, interface={7963490013514882401:0}, interface={7963490013514882401:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-2312597858880434160:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, product={-2985323630575166111:0}, ref_cnt=0, retval=4294967284, serial_number={-395753844837130911:0}, SERIAL_STATE=0, tmp={37154971803713537:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6487] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={-2985323630575166111:0}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6487] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-2985323630575198863:0}, __constr_expr_1={-6755399418020701:0}, __constr_expr_2={-2985323630575198879:0}, __key={-44473073710144285:0}, __key___0={-828099409065746975:0}, __key___1={-9007199253946384:0}, __key___2={-6754849664452887:0}, __key___3={-6755399422214937:0}, __key___4={-6755399420456317:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={4029032789254336481:0}, id={4029032789254336481:0}, int_urb={0:0}, INTERF_STATE=0, interface={7963490013514882401:0}, interface={7963490013514882401:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-2312597858880434160:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, product={-2985323630575166111:0}, ref_cnt=0, retval=4294967284, serial_number={-395753844837130911:0}, SERIAL_STATE=0, tmp={37154971803713537:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=95, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6488] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={-2985323630575198863:0}, __constr_expr_1={-6755399418020701:0}, __constr_expr_2={-2985323630575198879:0}, __key={-44473073710144285:0}, __key___0={-828099409065746975:0}, __key___1={-9007199253946384:0}, __key___2={-6754849664452887:0}, __key___3={-6755399422214937:0}, __key___4={-6755399420456317:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={4029032789254336481:0}, id={4029032789254336481:0}, int_urb={0:0}, INTERF_STATE=0, interface={7963490013514882401:0}, interface={7963490013514882401:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-2312597858880434160:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, product={-2985323630575166111:0}, ref_cnt=0, retval=4294967284, serial_number={-395753844837130911:0}, SERIAL_STATE=0, tmp={37154971803713537:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6488-L6489] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={-395753844837130911:0}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8556] return __VERIFIER_nondet_int(); [L6488-L6489] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-2985323630575198863:0}, __constr_expr_1={-6755399418020701:0}, __constr_expr_2={-2985323630575198879:0}, __key={-44473073710144285:0}, __key___0={-828099409065746975:0}, __key___1={-9007199253946384:0}, __key___2={-6754849664452887:0}, __key___3={-6755399422214937:0}, __key___4={-6755399420456317:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={4029032789254336481:0}, id={4029032789254336481:0}, int_urb={0:0}, INTERF_STATE=0, interface={7963490013514882401:0}, interface={7963490013514882401:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-2312597858880434160:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, product={-2985323630575166111:0}, ref_cnt=0, retval=4294967284, serial_number={-395753844837130911:0}, SERIAL_STATE=0, tmp={37154971803713537:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=96, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6491] udev->descriptor.idVendor [L6491] udev->descriptor.idProduct [L6493] CALL, EXPR ldv_usb_alloc_urb_45(0, 208U) [L8002] ldv_func_ret_type___11 ldv_func_res ; [L8003] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8005] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8514] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND TRUE tmp___0 != 0 [L4266] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=2149580800, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8514] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0=null, arg1=208, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8514] return ldv_malloc(sizeof(struct urb)); [L8005] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8005] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8006] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8007] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8186] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8007] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8008] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6493] RET, EXPR ldv_usb_alloc_urb_45(0, 208U) [L6493] command_out_urb = ldv_usb_alloc_urb_45(0, 208U) [L6494] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6495] retval = -12 [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, command_out_urb={0:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={4029032789254336481:0}, id={4029032789254336481:0}, int_urb={0:0}, INTERF_STATE=0, interface={7963490013514882401:0}, interface={7963490013514882401:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, retval=4294967284, SERIAL_STATE=0, tmp={37154971803713537:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7577] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7577] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7578] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, tmp___3=6, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7709] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7710] CALL vub300_exit() [L6922] CALL ldv_usb_deregister_61(& vub300_driver) [L8094] FCALL usb_deregister(arg) [L8095] ldv_state_variable_6 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg={87:0}, arg={87:0}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6922] RET ldv_usb_deregister_61(& vub300_driver) [L6923] CALL ldv_flush_workqueue_62(cmndworkqueue) [L8102] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036850581504:0}, ldv_func_arg1={-9223372036850581504:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8103] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8103] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036850581504:0}, ldv_func_arg1={-9223372036850581504:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6923] RET ldv_flush_workqueue_62(cmndworkqueue) [L6924] CALL ldv_flush_workqueue_63(pollworkqueue) [L8110] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372028264841216:0}, ldv_func_arg1={-9223372028264841216:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8111] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8111] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372028264841216:0}, ldv_func_arg1={-9223372028264841216:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6924] RET ldv_flush_workqueue_63(pollworkqueue) [L6925] CALL ldv_flush_workqueue_64(deadworkqueue) [L8118] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372028264841216:1099511627776}, ldv_func_arg1={-9223372028264841216:1099511627776}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8119] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8119] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372028264841216:1099511627776}, ldv_func_arg1={-9223372028264841216:1099511627776}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6925] RET ldv_flush_workqueue_64(deadworkqueue) [L6926] CALL ldv_destroy_workqueue_65(cmndworkqueue) [L8126] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036850581504:0}, ldv_func_arg1={-9223372036850581504:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8127] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8127] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036850581504:0}, ldv_func_arg1={-9223372036850581504:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6926] RET ldv_destroy_workqueue_65(cmndworkqueue) [L6927] CALL ldv_destroy_workqueue_66(pollworkqueue) [L8134] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372028264841216:0}, ldv_func_arg1={-9223372028264841216:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8135] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8135] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372028264841216:0}, ldv_func_arg1={-9223372028264841216:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6927] RET ldv_destroy_workqueue_66(pollworkqueue) [L6928] CALL ldv_destroy_workqueue_67(deadworkqueue) [L8142] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372028264841216:1099511627776}, ldv_func_arg1={-9223372028264841216:1099511627776}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8143] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8143] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372028264841216:1099511627776}, ldv_func_arg1={-9223372028264841216:1099511627776}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L6928] RET ldv_destroy_workqueue_67(deadworkqueue) [L7710] RET vub300_exit() [L7711] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-395753844837200528:0}, ldvarg1={4029032789254336481:0}, ldvarg2={8251157439711075681:0}, ldvarg3={8107042251637314913:0}, ldvarg4={5800917767439556513:0}, ldvarg5={-2989827230202536607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, tmp={4029032789254336481:0}, tmp___0={5800917767439556513:0}, tmp___1={8107042251637314913:0}, tmp___2={8251157439711075681:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L7752] CALL ldv_check_final_state() [L8355] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8359] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8360] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] [L8151] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={-9223372036850581504:0}, deadworkqueue={-9223372028264841216:1099511627776}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372028264841216:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={87:0}, vub300_driver_group1={7963490013514882401:0}, vub300_mmc_ops={86:0}, vub300_mmc_ops_group0={4504162549740658145:0}, vub300_table={85:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1582 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 112.0s, OverallIterations: 21, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.3s, AutomataDifference: 25.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 28223 SdHoareTripleChecker+Valid, 15.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 28072 mSDsluCounter, 158059 SdHoareTripleChecker+Invalid, 14.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 106672 mSDsCounter, 490 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1083 IncrementalHoareTripleChecker+Invalid, 1573 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 490 mSolverCounterUnsat, 51387 mSDtfsCounter, 1083 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 4162 GetRequests, 4075 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 10.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=21461occurred in iteration=15, InterpolantAutomatonStates: 100, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 8.7s AutomataMinimizationTime, 20 MinimizatonAttempts, 9532 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 1.5s SsaConstructionTime, 12.6s SatisfiabilityAnalysisTime, 44.3s InterpolantComputationTime, 4117 NumberOfCodeBlocks, 3922 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 4137 ConstructedInterpolants, 0 QuantifiedInterpolants, 5738 SizeOfPredicates, 21 NumberOfNonLiveVariables, 25727 ConjunctsInSsa, 82 ConjunctsInUnsatCore, 23 InterpolantComputations, 17 PerfectInterpolantSequences, 3841/3908 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-18 05:24:29,328 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample