./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ae007674 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ae00767 [2021-12-28 04:06:02,299 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-28 04:06:02,302 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-28 04:06:02,333 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-28 04:06:02,333 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-28 04:06:02,336 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-28 04:06:02,337 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-28 04:06:02,341 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-28 04:06:02,342 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-28 04:06:02,346 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-28 04:06:02,354 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-28 04:06:02,355 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-28 04:06:02,355 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-28 04:06:02,357 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-28 04:06:02,358 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-28 04:06:02,362 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-28 04:06:02,363 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-28 04:06:02,363 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-28 04:06:02,365 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-28 04:06:02,369 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-28 04:06:02,370 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-28 04:06:02,371 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-28 04:06:02,372 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-28 04:06:02,373 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-28 04:06:02,378 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-28 04:06:02,378 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-28 04:06:02,378 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-28 04:06:02,380 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-28 04:06:02,380 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-28 04:06:02,381 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-28 04:06:02,381 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-28 04:06:02,381 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-28 04:06:02,383 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-28 04:06:02,383 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-28 04:06:02,384 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-28 04:06:02,384 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-28 04:06:02,385 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-28 04:06:02,385 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-28 04:06:02,385 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-28 04:06:02,386 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-28 04:06:02,387 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-28 04:06:02,390 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-12-28 04:06:02,419 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-28 04:06:02,419 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-28 04:06:02,420 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-28 04:06:02,420 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-28 04:06:02,421 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-28 04:06:02,421 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-28 04:06:02,422 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-28 04:06:02,422 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-28 04:06:02,422 INFO L138 SettingsManager]: * Use SBE=true [2021-12-28 04:06:02,423 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-28 04:06:02,423 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-28 04:06:02,423 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-28 04:06:02,423 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-28 04:06:02,424 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-28 04:06:02,424 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-28 04:06:02,424 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-28 04:06:02,424 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-28 04:06:02,424 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-28 04:06:02,424 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-28 04:06:02,424 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-28 04:06:02,425 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-28 04:06:02,425 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-28 04:06:02,425 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-28 04:06:02,425 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-28 04:06:02,425 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-28 04:06:02,425 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-28 04:06:02,425 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-28 04:06:02,426 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-28 04:06:02,426 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-28 04:06:02,426 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-28 04:06:02,426 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2021-12-28 04:06:02,696 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-28 04:06:02,733 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-28 04:06:02,735 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-28 04:06:02,736 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-28 04:06:02,748 INFO L275 PluginConnector]: CDTParser initialized [2021-12-28 04:06:02,749 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-28 04:06:02,830 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/682aed6b5/9cc12902e4034bbcb67f9e7eb1ede614/FLAGdd1416eb9 [2021-12-28 04:06:03,427 INFO L306 CDTParser]: Found 1 translation units. [2021-12-28 04:06:03,427 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-28 04:06:03,451 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/682aed6b5/9cc12902e4034bbcb67f9e7eb1ede614/FLAGdd1416eb9 [2021-12-28 04:06:03,636 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/682aed6b5/9cc12902e4034bbcb67f9e7eb1ede614 [2021-12-28 04:06:03,639 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-28 04:06:03,640 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-28 04:06:03,643 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-28 04:06:03,643 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-28 04:06:03,647 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-28 04:06:03,648 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.12 04:06:03" (1/1) ... [2021-12-28 04:06:03,649 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@390398ff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:03, skipping insertion in model container [2021-12-28 04:06:03,650 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.12 04:06:03" (1/1) ... [2021-12-28 04:06:03,655 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-28 04:06:03,728 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-28 04:06:04,057 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-28 04:06:04,058 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-28 04:06:04,058 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-28 04:06:04,058 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-28 04:06:04,058 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-28 04:06:04,059 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-28 04:06:04,059 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-28 04:06:04,059 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-28 04:06:04,064 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-28 04:06:04,064 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-28 04:06:04,065 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-28 04:06:04,065 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-28 04:06:04,066 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-28 04:06:04,066 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-28 04:06:04,067 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-28 04:06:04,067 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-28 04:06:04,067 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-28 04:06:04,067 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-28 04:06:04,068 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-28 04:06:04,068 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-28 04:06:04,177 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-28 04:06:04,329 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-28 04:06:04,363 INFO L203 MainTranslator]: Completed pre-run [2021-12-28 04:06:04,436 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-28 04:06:04,436 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-28 04:06:04,437 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-28 04:06:04,438 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-28 04:06:04,438 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-28 04:06:04,438 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-28 04:06:04,439 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-28 04:06:04,439 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-28 04:06:04,443 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-28 04:06:04,444 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-28 04:06:04,444 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-28 04:06:04,445 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-28 04:06:04,445 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-28 04:06:04,445 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-28 04:06:04,446 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-28 04:06:04,446 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-28 04:06:04,446 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-28 04:06:04,446 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-28 04:06:04,447 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-28 04:06:04,447 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-28 04:06:04,475 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-28 04:06:04,529 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-28 04:06:04,590 INFO L208 MainTranslator]: Completed translation [2021-12-28 04:06:04,599 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04 WrapperNode [2021-12-28 04:06:04,599 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-28 04:06:04,600 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-28 04:06:04,600 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-28 04:06:04,601 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-28 04:06:04,605 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,661 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,766 INFO L137 Inliner]: procedures = 98, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1886 [2021-12-28 04:06:04,767 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-28 04:06:04,767 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-28 04:06:04,767 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-28 04:06:04,768 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-28 04:06:04,773 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,773 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,797 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,797 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,863 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,885 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,891 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,914 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-28 04:06:04,915 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-28 04:06:04,915 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-28 04:06:04,915 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-28 04:06:04,915 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (1/1) ... [2021-12-28 04:06:04,920 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-28 04:06:04,927 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-28 04:06:04,964 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-28 04:06:04,983 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-28 04:06:05,003 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2021-12-28 04:06:05,004 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2021-12-28 04:06:05,004 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-28 04:06:05,004 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-28 04:06:05,004 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-12-28 04:06:05,005 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2021-12-28 04:06:05,005 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2021-12-28 04:06:05,005 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-28 04:06:05,005 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-28 04:06:05,005 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-28 04:06:05,005 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-28 04:06:05,005 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-28 04:06:05,005 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-28 04:06:05,006 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2021-12-28 04:06:05,006 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2021-12-28 04:06:05,006 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-28 04:06:05,006 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-28 04:06:05,006 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2021-12-28 04:06:05,007 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2021-12-28 04:06:05,007 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-28 04:06:05,008 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-28 04:06:05,008 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2021-12-28 04:06:05,008 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2021-12-28 04:06:05,008 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-28 04:06:05,008 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-28 04:06:05,008 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-28 04:06:05,008 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-12-28 04:06:05,009 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-12-28 04:06:05,009 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2021-12-28 04:06:05,009 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-28 04:06:05,009 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-28 04:06:05,009 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-28 04:06:05,010 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-28 04:06:05,010 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2021-12-28 04:06:05,010 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2021-12-28 04:06:05,010 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2021-12-28 04:06:05,020 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2021-12-28 04:06:05,020 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-28 04:06:05,020 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-28 04:06:05,020 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2021-12-28 04:06:05,021 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2021-12-28 04:06:05,021 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2021-12-28 04:06:05,021 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2021-12-28 04:06:05,021 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2021-12-28 04:06:05,021 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2021-12-28 04:06:05,021 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2021-12-28 04:06:05,021 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2021-12-28 04:06:05,021 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-28 04:06:05,021 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2021-12-28 04:06:05,022 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2021-12-28 04:06:05,022 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-28 04:06:05,022 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-28 04:06:05,022 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2021-12-28 04:06:05,022 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2021-12-28 04:06:05,023 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-28 04:06:05,023 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-28 04:06:05,327 INFO L234 CfgBuilder]: Building ICFG [2021-12-28 04:06:05,329 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-28 04:06:05,459 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-28 04:06:05,497 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-12-28 04:06:06,308 INFO L275 CfgBuilder]: Performing block encoding [2021-12-28 04:06:06,314 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-28 04:06:06,315 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-28 04:06:06,316 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.12 04:06:06 BoogieIcfgContainer [2021-12-28 04:06:06,317 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-28 04:06:06,318 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-28 04:06:06,318 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-28 04:06:06,320 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-28 04:06:06,320 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.12 04:06:03" (1/3) ... [2021-12-28 04:06:06,320 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@889e9a7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.12 04:06:06, skipping insertion in model container [2021-12-28 04:06:06,320 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:04" (2/3) ... [2021-12-28 04:06:06,321 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@889e9a7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.12 04:06:06, skipping insertion in model container [2021-12-28 04:06:06,321 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.12 04:06:06" (3/3) ... [2021-12-28 04:06:06,322 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-28 04:06:06,325 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-28 04:06:06,325 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-28 04:06:06,355 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-28 04:06:06,360 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-28 04:06:06,360 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-28 04:06:06,391 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2021-12-28 04:06:06,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-28 04:06:06,398 INFO L506 BasicCegarLoop]: Found error trace [2021-12-28 04:06:06,399 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-28 04:06:06,399 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-28 04:06:06,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-28 04:06:06,403 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2021-12-28 04:06:06,408 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-28 04:06:06,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1339398924] [2021-12-28 04:06:06,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-28 04:06:06,410 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-28 04:06:06,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:06,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-28 04:06:06,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:06,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-28 04:06:06,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:06,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-28 04:06:06,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:06,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-28 04:06:06,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:06,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-28 04:06:06,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:06,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-28 04:06:06,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:06,852 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-28 04:06:06,853 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-28 04:06:06,853 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1339398924] [2021-12-28 04:06:06,853 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1339398924] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-28 04:06:06,853 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-28 04:06:06,854 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-28 04:06:06,855 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [46963047] [2021-12-28 04:06:06,855 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-28 04:06:06,858 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-28 04:06:06,858 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-28 04:06:06,874 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-28 04:06:06,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-28 04:06:06,877 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-28 04:06:07,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-28 04:06:07,698 INFO L93 Difference]: Finished difference Result 758 states and 1117 transitions. [2021-12-28 04:06:07,700 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-28 04:06:07,701 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2021-12-28 04:06:07,702 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-28 04:06:07,716 INFO L225 Difference]: With dead ends: 758 [2021-12-28 04:06:07,716 INFO L226 Difference]: Without dead ends: 351 [2021-12-28 04:06:07,726 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=129, Unknown=0, NotChecked=0, Total=182 [2021-12-28 04:06:07,734 INFO L933 BasicCegarLoop]: 474 mSDtfsCounter, 135 mSDsluCounter, 2046 mSDsCounter, 0 mSdLazyCounter, 549 mSolverCounterSat, 132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 2520 SdHoareTripleChecker+Invalid, 681 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 132 IncrementalHoareTripleChecker+Valid, 549 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-28 04:06:07,736 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [142 Valid, 2520 Invalid, 681 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [132 Valid, 549 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-28 04:06:07,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2021-12-28 04:06:07,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 342. [2021-12-28 04:06:07,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-28 04:06:07,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2021-12-28 04:06:07,797 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2021-12-28 04:06:07,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-28 04:06:07,797 INFO L470 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2021-12-28 04:06:07,798 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-28 04:06:07,798 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2021-12-28 04:06:07,800 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-28 04:06:07,800 INFO L506 BasicCegarLoop]: Found error trace [2021-12-28 04:06:07,800 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-28 04:06:07,801 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-28 04:06:07,801 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-28 04:06:07,801 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-28 04:06:07,801 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2021-12-28 04:06:07,801 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-28 04:06:07,802 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1012129610] [2021-12-28 04:06:07,802 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-28 04:06:07,802 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-28 04:06:07,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:07,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-28 04:06:07,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:07,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-28 04:06:07,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:07,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-28 04:06:07,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:07,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-28 04:06:07,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:07,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-28 04:06:07,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:07,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-28 04:06:07,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:07,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-28 04:06:07,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:07,986 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-28 04:06:07,986 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-28 04:06:07,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1012129610] [2021-12-28 04:06:07,986 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1012129610] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-28 04:06:07,987 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1121478345] [2021-12-28 04:06:07,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-28 04:06:07,987 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-28 04:06:07,987 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-28 04:06:07,989 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-28 04:06:07,990 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-28 04:06:08,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:08,377 INFO L263 TraceCheckSpWp]: Trace formula consists of 2305 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-28 04:06:08,383 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-28 04:06:08,520 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-28 04:06:08,520 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-28 04:06:08,521 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1121478345] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-28 04:06:08,521 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-28 04:06:08,521 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 8 [2021-12-28 04:06:08,522 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [700409762] [2021-12-28 04:06:08,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-28 04:06:08,522 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-28 04:06:08,522 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-28 04:06:08,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-28 04:06:08,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-28 04:06:08,523 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-28 04:06:08,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-28 04:06:08,556 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2021-12-28 04:06:08,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-28 04:06:08,557 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2021-12-28 04:06:08,557 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-28 04:06:08,559 INFO L225 Difference]: With dead ends: 657 [2021-12-28 04:06:08,559 INFO L226 Difference]: Without dead ends: 343 [2021-12-28 04:06:08,560 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-12-28 04:06:08,564 INFO L933 BasicCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-28 04:06:08,564 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-28 04:06:08,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2021-12-28 04:06:08,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2021-12-28 04:06:08,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-28 04:06:08,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2021-12-28 04:06:08,579 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2021-12-28 04:06:08,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-28 04:06:08,580 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2021-12-28 04:06:08,580 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-28 04:06:08,580 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2021-12-28 04:06:08,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-28 04:06:08,582 INFO L506 BasicCegarLoop]: Found error trace [2021-12-28 04:06:08,582 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-28 04:06:08,628 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-28 04:06:08,802 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-28 04:06:08,803 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-28 04:06:08,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-28 04:06:08,804 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2021-12-28 04:06:08,804 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-28 04:06:08,805 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [416518250] [2021-12-28 04:06:08,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-28 04:06:08,805 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-28 04:06:08,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:09,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-28 04:06:09,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:09,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-28 04:06:09,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:09,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-28 04:06:09,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:09,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-28 04:06:09,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:09,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-28 04:06:09,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:09,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-28 04:06:09,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:09,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-28 04:06:09,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:09,155 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-28 04:06:09,156 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-28 04:06:09,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [416518250] [2021-12-28 04:06:09,156 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [416518250] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-28 04:06:09,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1635358142] [2021-12-28 04:06:09,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-28 04:06:09,157 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-28 04:06:09,157 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-28 04:06:09,158 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-28 04:06:09,187 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-28 04:06:09,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:09,588 INFO L263 TraceCheckSpWp]: Trace formula consists of 2335 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-28 04:06:09,591 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-28 04:06:09,736 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-28 04:06:09,736 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-28 04:06:09,980 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-28 04:06:09,981 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1635358142] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-28 04:06:09,981 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-28 04:06:09,981 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 5, 5] total 13 [2021-12-28 04:06:09,981 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1811591005] [2021-12-28 04:06:09,982 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-28 04:06:09,983 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-12-28 04:06:09,983 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-28 04:06:09,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-12-28 04:06:09,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=118, Unknown=0, NotChecked=0, Total=156 [2021-12-28 04:06:09,984 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-28 04:06:10,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-28 04:06:10,670 INFO L93 Difference]: Finished difference Result 669 states and 960 transitions. [2021-12-28 04:06:10,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-28 04:06:10,670 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 63 [2021-12-28 04:06:10,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-28 04:06:10,677 INFO L225 Difference]: With dead ends: 669 [2021-12-28 04:06:10,677 INFO L226 Difference]: Without dead ends: 352 [2021-12-28 04:06:10,678 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 131 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=95, Invalid=285, Unknown=0, NotChecked=0, Total=380 [2021-12-28 04:06:10,680 INFO L933 BasicCegarLoop]: 463 mSDtfsCounter, 124 mSDsluCounter, 2460 mSDsCounter, 0 mSdLazyCounter, 662 mSolverCounterSat, 166 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 2923 SdHoareTripleChecker+Invalid, 828 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 166 IncrementalHoareTripleChecker+Valid, 662 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-28 04:06:10,686 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [125 Valid, 2923 Invalid, 828 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [166 Valid, 662 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-28 04:06:10,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2021-12-28 04:06:10,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 346. [2021-12-28 04:06:10,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-28 04:06:10,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2021-12-28 04:06:10,711 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2021-12-28 04:06:10,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-28 04:06:10,711 INFO L470 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2021-12-28 04:06:10,711 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-28 04:06:10,711 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2021-12-28 04:06:10,713 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-28 04:06:10,713 INFO L506 BasicCegarLoop]: Found error trace [2021-12-28 04:06:10,714 INFO L514 BasicCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-28 04:06:10,742 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-28 04:06:10,943 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable2 [2021-12-28 04:06:10,944 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-28 04:06:10,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-28 04:06:10,945 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2021-12-28 04:06:10,945 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-28 04:06:10,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [854287910] [2021-12-28 04:06:10,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-28 04:06:10,945 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-28 04:06:11,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-28 04:06:11,105 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-28 04:06:11,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-28 04:06:11,276 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-28 04:06:11,276 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-28 04:06:11,277 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-28 04:06:11,278 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-28 04:06:11,280 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2021-12-28 04:06:11,282 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-28 04:06:11,298 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-28 04:06:11,299 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-28 04:06:11,354 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.12 04:06:11 BoogieIcfgContainer [2021-12-28 04:06:11,354 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-28 04:06:11,355 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-28 04:06:11,355 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-28 04:06:11,355 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-28 04:06:11,355 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.12 04:06:06" (3/4) ... [2021-12-28 04:06:11,357 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-28 04:06:11,357 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-28 04:06:11,358 INFO L158 Benchmark]: Toolchain (without parser) took 7717.53ms. Allocated memory was 60.8MB in the beginning and 302.0MB in the end (delta: 241.2MB). Free memory was 37.6MB in the beginning and 203.5MB in the end (delta: -165.8MB). Peak memory consumption was 74.7MB. Max. memory is 16.1GB. [2021-12-28 04:06:11,358 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 46.1MB. Free memory was 26.7MB in the beginning and 26.6MB in the end (delta: 52.4kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-28 04:06:11,358 INFO L158 Benchmark]: CACSL2BoogieTranslator took 957.16ms. Allocated memory was 60.8MB in the beginning and 73.4MB in the end (delta: 12.6MB). Free memory was 37.3MB in the beginning and 35.8MB in the end (delta: 1.5MB). Peak memory consumption was 33.9MB. Max. memory is 16.1GB. [2021-12-28 04:06:11,358 INFO L158 Benchmark]: Boogie Procedure Inliner took 166.33ms. Allocated memory was 73.4MB in the beginning and 92.3MB in the end (delta: 18.9MB). Free memory was 35.8MB in the beginning and 49.2MB in the end (delta: -13.4MB). Peak memory consumption was 17.9MB. Max. memory is 16.1GB. [2021-12-28 04:06:11,359 INFO L158 Benchmark]: Boogie Preprocessor took 146.61ms. Allocated memory is still 92.3MB. Free memory was 49.2MB in the beginning and 38.4MB in the end (delta: 10.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-28 04:06:11,359 INFO L158 Benchmark]: RCFGBuilder took 1402.05ms. Allocated memory was 92.3MB in the beginning and 138.4MB in the end (delta: 46.1MB). Free memory was 38.0MB in the beginning and 55.5MB in the end (delta: -17.5MB). Peak memory consumption was 39.1MB. Max. memory is 16.1GB. [2021-12-28 04:06:11,359 INFO L158 Benchmark]: TraceAbstraction took 5036.70ms. Allocated memory was 138.4MB in the beginning and 302.0MB in the end (delta: 163.6MB). Free memory was 55.5MB in the beginning and 203.5MB in the end (delta: -147.9MB). Peak memory consumption was 114.2MB. Max. memory is 16.1GB. [2021-12-28 04:06:11,359 INFO L158 Benchmark]: Witness Printer took 2.64ms. Allocated memory is still 302.0MB. Free memory is still 203.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-28 04:06:11,360 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 46.1MB. Free memory was 26.7MB in the beginning and 26.6MB in the end (delta: 52.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 957.16ms. Allocated memory was 60.8MB in the beginning and 73.4MB in the end (delta: 12.6MB). Free memory was 37.3MB in the beginning and 35.8MB in the end (delta: 1.5MB). Peak memory consumption was 33.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 166.33ms. Allocated memory was 73.4MB in the beginning and 92.3MB in the end (delta: 18.9MB). Free memory was 35.8MB in the beginning and 49.2MB in the end (delta: -13.4MB). Peak memory consumption was 17.9MB. Max. memory is 16.1GB. * Boogie Preprocessor took 146.61ms. Allocated memory is still 92.3MB. Free memory was 49.2MB in the beginning and 38.4MB in the end (delta: 10.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 1402.05ms. Allocated memory was 92.3MB in the beginning and 138.4MB in the end (delta: 46.1MB). Free memory was 38.0MB in the beginning and 55.5MB in the end (delta: -17.5MB). Peak memory consumption was 39.1MB. Max. memory is 16.1GB. * TraceAbstraction took 5036.70ms. Allocated memory was 138.4MB in the beginning and 302.0MB in the end (delta: 163.6MB). Free memory was 55.5MB in the beginning and 203.5MB in the end (delta: -147.9MB). Peak memory consumption was 114.2MB. Max. memory is 16.1GB. * Witness Printer took 2.64ms. Allocated memory is still 302.0MB. Free memory is still 203.5MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={42:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=1, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551617:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551617:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551617:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=1, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.9s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 1.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 269 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 261 mSDsluCounter, 6838 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5435 mSDsCounter, 299 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1219 IncrementalHoareTripleChecker+Invalid, 1518 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 299 mSolverCounterUnsat, 1403 mSDtfsCounter, 1219 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 253 GetRequests, 214 SyntacticMatches, 2 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 26, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 15 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.9s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 372 NumberOfCodeBlocks, 372 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 360 ConstructedInterpolants, 0 QuantifiedInterpolants, 716 SizeOfPredicates, 2 NumberOfNonLiveVariables, 4640 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 6 InterpolantComputations, 2 PerfectInterpolantSequences, 93/111 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-28 04:06:11,403 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ae00767 [2021-12-28 04:06:13,092 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-28 04:06:13,094 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-28 04:06:13,134 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-28 04:06:13,135 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-28 04:06:13,137 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-28 04:06:13,139 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-28 04:06:13,143 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-28 04:06:13,146 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-28 04:06:13,149 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-28 04:06:13,150 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-28 04:06:13,151 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-28 04:06:13,152 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-28 04:06:13,153 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-28 04:06:13,154 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-28 04:06:13,155 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-28 04:06:13,156 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-28 04:06:13,158 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-28 04:06:13,159 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-28 04:06:13,164 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-28 04:06:13,165 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-28 04:06:13,165 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-28 04:06:13,166 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-28 04:06:13,168 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-28 04:06:13,174 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-28 04:06:13,175 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-28 04:06:13,175 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-28 04:06:13,177 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-28 04:06:13,177 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-28 04:06:13,178 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-28 04:06:13,178 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-28 04:06:13,179 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-28 04:06:13,180 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-28 04:06:13,180 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-28 04:06:13,181 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-28 04:06:13,181 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-28 04:06:13,182 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-28 04:06:13,182 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-28 04:06:13,182 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-28 04:06:13,184 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-28 04:06:13,184 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-28 04:06:13,187 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-12-28 04:06:13,217 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-28 04:06:13,217 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-28 04:06:13,218 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-28 04:06:13,218 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-28 04:06:13,219 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-28 04:06:13,219 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-28 04:06:13,220 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-28 04:06:13,221 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-28 04:06:13,221 INFO L138 SettingsManager]: * Use SBE=true [2021-12-28 04:06:13,221 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-28 04:06:13,221 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-28 04:06:13,222 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-28 04:06:13,222 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-28 04:06:13,222 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-28 04:06:13,222 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-12-28 04:06:13,222 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-12-28 04:06:13,222 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-12-28 04:06:13,222 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-28 04:06:13,223 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-28 04:06:13,223 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-28 04:06:13,223 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-28 04:06:13,223 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-28 04:06:13,223 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-28 04:06:13,223 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-28 04:06:13,224 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-28 04:06:13,224 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-28 04:06:13,224 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-28 04:06:13,224 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-12-28 04:06:13,224 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-12-28 04:06:13,224 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-28 04:06:13,224 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-28 04:06:13,225 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-28 04:06:13,225 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-12-28 04:06:13,225 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2021-12-28 04:06:13,492 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-28 04:06:13,507 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-28 04:06:13,509 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-28 04:06:13,510 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-28 04:06:13,512 INFO L275 PluginConnector]: CDTParser initialized [2021-12-28 04:06:13,513 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-28 04:06:13,588 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4c0259b03/f08d522f36554c6f82ba084a724365c3/FLAG509c4e4dd [2021-12-28 04:06:14,151 INFO L306 CDTParser]: Found 1 translation units. [2021-12-28 04:06:14,151 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-28 04:06:14,180 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4c0259b03/f08d522f36554c6f82ba084a724365c3/FLAG509c4e4dd [2021-12-28 04:06:14,583 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4c0259b03/f08d522f36554c6f82ba084a724365c3 [2021-12-28 04:06:14,585 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-28 04:06:14,586 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-28 04:06:14,587 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-28 04:06:14,587 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-28 04:06:14,590 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-28 04:06:14,590 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.12 04:06:14" (1/1) ... [2021-12-28 04:06:14,591 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2d17848b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:14, skipping insertion in model container [2021-12-28 04:06:14,591 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.12 04:06:14" (1/1) ... [2021-12-28 04:06:14,598 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-28 04:06:14,666 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-28 04:06:14,987 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-28 04:06:14,988 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-28 04:06:14,988 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-28 04:06:14,988 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-28 04:06:14,990 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-28 04:06:14,992 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-28 04:06:14,992 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-28 04:06:14,993 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-28 04:06:15,001 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-28 04:06:15,001 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-28 04:06:15,002 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-28 04:06:15,002 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-28 04:06:15,002 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-28 04:06:15,003 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-28 04:06:15,004 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-28 04:06:15,004 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-28 04:06:15,004 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-28 04:06:15,004 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-28 04:06:15,004 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-28 04:06:15,005 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-28 04:06:15,132 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-28 04:06:15,372 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-28 04:06:15,436 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-12-28 04:06:15,471 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-28 04:06:15,521 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-28 04:06:15,522 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-28 04:06:15,522 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-28 04:06:15,522 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-28 04:06:15,523 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-28 04:06:15,523 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-28 04:06:15,523 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-28 04:06:15,524 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-28 04:06:15,528 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-28 04:06:15,528 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-28 04:06:15,528 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-28 04:06:15,529 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-28 04:06:15,529 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-28 04:06:15,529 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-28 04:06:15,530 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-28 04:06:15,530 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-28 04:06:15,530 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-28 04:06:15,530 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-28 04:06:15,531 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-28 04:06:15,531 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-28 04:06:15,554 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-28 04:06:15,610 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-28 04:06:15,626 INFO L203 MainTranslator]: Completed pre-run [2021-12-28 04:06:15,696 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2021-12-28 04:06:15,697 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2021-12-28 04:06:15,697 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2021-12-28 04:06:15,697 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2021-12-28 04:06:15,697 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2021-12-28 04:06:15,698 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2021-12-28 04:06:15,698 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2021-12-28 04:06:15,698 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2021-12-28 04:06:15,702 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2021-12-28 04:06:15,702 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2021-12-28 04:06:15,703 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2021-12-28 04:06:15,703 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2021-12-28 04:06:15,703 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2021-12-28 04:06:15,704 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2021-12-28 04:06:15,704 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2021-12-28 04:06:15,704 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2021-12-28 04:06:15,704 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2021-12-28 04:06:15,705 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2021-12-28 04:06:15,705 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2021-12-28 04:06:15,705 WARN L1240 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2021-12-28 04:06:15,727 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2021-12-28 04:06:15,758 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-28 04:06:15,831 INFO L208 MainTranslator]: Completed translation [2021-12-28 04:06:15,832 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15 WrapperNode [2021-12-28 04:06:15,832 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-28 04:06:15,833 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-28 04:06:15,833 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-28 04:06:15,833 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-28 04:06:15,837 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:15,877 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:15,972 INFO L137 Inliner]: procedures = 107, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1826 [2021-12-28 04:06:15,973 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-28 04:06:15,973 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-28 04:06:15,973 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-28 04:06:15,974 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-28 04:06:15,979 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:15,979 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:15,994 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:15,994 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:16,046 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:16,059 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:16,088 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:16,101 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-28 04:06:16,106 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-28 04:06:16,106 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-28 04:06:16,106 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-28 04:06:16,107 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (1/1) ... [2021-12-28 04:06:16,111 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-28 04:06:16,118 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-28 04:06:16,144 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-28 04:06:16,189 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-28 04:06:16,206 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-12-28 04:06:16,207 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-12-28 04:06:16,207 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2021-12-28 04:06:16,207 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2021-12-28 04:06:16,207 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-12-28 04:06:16,207 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-12-28 04:06:16,207 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2021-12-28 04:06:16,207 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2021-12-28 04:06:16,208 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-12-28 04:06:16,208 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-12-28 04:06:16,208 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-12-28 04:06:16,208 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-12-28 04:06:16,208 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-12-28 04:06:16,208 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-12-28 04:06:16,209 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2021-12-28 04:06:16,209 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2021-12-28 04:06:16,209 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-12-28 04:06:16,209 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-12-28 04:06:16,209 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2021-12-28 04:06:16,209 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2021-12-28 04:06:16,209 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-12-28 04:06:16,209 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-12-28 04:06:16,210 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2021-12-28 04:06:16,210 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2021-12-28 04:06:16,210 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-12-28 04:06:16,210 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-12-28 04:06:16,210 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-12-28 04:06:16,210 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2021-12-28 04:06:16,211 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2021-12-28 04:06:16,211 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2021-12-28 04:06:16,211 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-28 04:06:16,211 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-12-28 04:06:16,212 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-12-28 04:06:16,212 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-12-28 04:06:16,212 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2021-12-28 04:06:16,212 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2021-12-28 04:06:16,213 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2021-12-28 04:06:16,213 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2021-12-28 04:06:16,213 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-12-28 04:06:16,213 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-12-28 04:06:16,213 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2021-12-28 04:06:16,213 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2021-12-28 04:06:16,214 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-12-28 04:06:16,214 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-12-28 04:06:16,214 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-12-28 04:06:16,214 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-12-28 04:06:16,214 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2021-12-28 04:06:16,215 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2021-12-28 04:06:16,215 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2021-12-28 04:06:16,215 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2021-12-28 04:06:16,215 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2021-12-28 04:06:16,215 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2021-12-28 04:06:16,216 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2021-12-28 04:06:16,230 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2021-12-28 04:06:16,230 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-12-28 04:06:16,231 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-12-28 04:06:16,231 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2021-12-28 04:06:16,231 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2021-12-28 04:06:16,231 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-28 04:06:16,231 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-28 04:06:16,447 INFO L234 CfgBuilder]: Building ICFG [2021-12-28 04:06:16,449 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-28 04:06:16,543 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-12-28 04:06:16,590 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2021-12-28 04:06:17,899 INFO L275 CfgBuilder]: Performing block encoding [2021-12-28 04:06:17,908 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-28 04:06:17,908 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2021-12-28 04:06:17,916 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.12 04:06:17 BoogieIcfgContainer [2021-12-28 04:06:17,916 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-28 04:06:17,917 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-28 04:06:17,917 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-28 04:06:17,919 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-28 04:06:17,919 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.12 04:06:14" (1/3) ... [2021-12-28 04:06:17,919 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a74549e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.12 04:06:17, skipping insertion in model container [2021-12-28 04:06:17,919 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.12 04:06:15" (2/3) ... [2021-12-28 04:06:17,919 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a74549e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.12 04:06:17, skipping insertion in model container [2021-12-28 04:06:17,920 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.12 04:06:17" (3/3) ... [2021-12-28 04:06:17,920 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2021-12-28 04:06:17,923 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-28 04:06:17,923 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-28 04:06:17,950 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-28 04:06:17,954 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-28 04:06:17,954 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-28 04:06:17,968 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2021-12-28 04:06:17,974 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-28 04:06:17,974 INFO L506 BasicCegarLoop]: Found error trace [2021-12-28 04:06:17,975 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-28 04:06:17,975 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-28 04:06:17,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-28 04:06:17,979 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2021-12-28 04:06:17,990 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-28 04:06:17,990 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1549341853] [2021-12-28 04:06:17,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-28 04:06:17,991 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-28 04:06:17,991 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-28 04:06:18,011 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-28 04:06:18,017 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-12-28 04:06:18,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:18,807 INFO L263 TraceCheckSpWp]: Trace formula consists of 1929 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-28 04:06:18,813 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-28 04:06:18,942 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-28 04:06:18,942 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-28 04:06:18,943 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-28 04:06:18,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1549341853] [2021-12-28 04:06:18,943 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1549341853] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-28 04:06:18,943 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-28 04:06:18,943 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-28 04:06:18,945 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530894344] [2021-12-28 04:06:18,945 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-28 04:06:18,948 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-28 04:06:18,948 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-28 04:06:18,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-28 04:06:18,965 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-28 04:06:18,967 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-28 04:06:19,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-28 04:06:19,163 INFO L93 Difference]: Finished difference Result 751 states and 1103 transitions. [2021-12-28 04:06:19,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-28 04:06:19,165 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2021-12-28 04:06:19,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-28 04:06:19,173 INFO L225 Difference]: With dead ends: 751 [2021-12-28 04:06:19,173 INFO L226 Difference]: Without dead ends: 344 [2021-12-28 04:06:19,177 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-28 04:06:19,179 INFO L933 BasicCegarLoop]: 480 mSDtfsCounter, 34 mSDsluCounter, 1421 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 1901 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-28 04:06:19,180 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [35 Valid, 1901 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-28 04:06:19,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 344 states. [2021-12-28 04:06:19,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 344 to 342. [2021-12-28 04:06:19,219 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-28 04:06:19,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2021-12-28 04:06:19,222 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2021-12-28 04:06:19,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-28 04:06:19,222 INFO L470 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2021-12-28 04:06:19,222 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-28 04:06:19,223 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2021-12-28 04:06:19,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-28 04:06:19,225 INFO L506 BasicCegarLoop]: Found error trace [2021-12-28 04:06:19,225 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-28 04:06:19,270 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-12-28 04:06:19,452 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-28 04:06:19,452 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-28 04:06:19,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-28 04:06:19,453 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2021-12-28 04:06:19,455 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-28 04:06:19,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [804730254] [2021-12-28 04:06:19,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-28 04:06:19,455 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-28 04:06:19,456 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-28 04:06:19,457 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-28 04:06:19,459 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-12-28 04:06:20,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:20,315 INFO L263 TraceCheckSpWp]: Trace formula consists of 1946 conjuncts, 3 conjunts are in the unsatisfiable core [2021-12-28 04:06:20,318 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-28 04:06:20,402 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-28 04:06:20,402 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-28 04:06:20,402 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-28 04:06:20,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [804730254] [2021-12-28 04:06:20,403 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [804730254] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-28 04:06:20,403 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-28 04:06:20,403 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-28 04:06:20,403 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1364360406] [2021-12-28 04:06:20,403 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-28 04:06:20,404 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-28 04:06:20,404 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-28 04:06:20,405 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-28 04:06:20,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-28 04:06:20,405 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-28 04:06:20,442 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-28 04:06:20,442 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2021-12-28 04:06:20,443 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-28 04:06:20,443 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2021-12-28 04:06:20,443 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-28 04:06:20,445 INFO L225 Difference]: With dead ends: 657 [2021-12-28 04:06:20,445 INFO L226 Difference]: Without dead ends: 343 [2021-12-28 04:06:20,446 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-28 04:06:20,446 INFO L933 BasicCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-28 04:06:20,447 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-28 04:06:20,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2021-12-28 04:06:20,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2021-12-28 04:06:20,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-28 04:06:20,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2021-12-28 04:06:20,461 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2021-12-28 04:06:20,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-28 04:06:20,461 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2021-12-28 04:06:20,461 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-28 04:06:20,461 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2021-12-28 04:06:20,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-28 04:06:20,463 INFO L506 BasicCegarLoop]: Found error trace [2021-12-28 04:06:20,463 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-28 04:06:20,494 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-12-28 04:06:20,689 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-28 04:06:20,690 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-28 04:06:20,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-28 04:06:20,693 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2021-12-28 04:06:20,709 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-28 04:06:20,709 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [492482223] [2021-12-28 04:06:20,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-28 04:06:20,709 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-28 04:06:20,709 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-28 04:06:20,710 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-28 04:06:20,747 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-12-28 04:06:21,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-28 04:06:21,545 INFO L263 TraceCheckSpWp]: Trace formula consists of 1968 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-28 04:06:21,548 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-28 04:06:21,636 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-28 04:06:21,637 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-28 04:06:21,806 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-28 04:06:21,807 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-12-28 04:06:21,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [492482223] [2021-12-28 04:06:21,807 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [492482223] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-28 04:06:21,807 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-12-28 04:06:21,807 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2021-12-28 04:06:21,808 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1163813787] [2021-12-28 04:06:21,808 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-12-28 04:06:21,808 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-28 04:06:21,808 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-12-28 04:06:21,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-28 04:06:21,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-28 04:06:21,809 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-28 04:06:21,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-28 04:06:21,922 INFO L93 Difference]: Finished difference Result 663 states and 949 transitions. [2021-12-28 04:06:21,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-28 04:06:21,923 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 63 [2021-12-28 04:06:21,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-28 04:06:21,924 INFO L225 Difference]: With dead ends: 663 [2021-12-28 04:06:21,924 INFO L226 Difference]: Without dead ends: 346 [2021-12-28 04:06:21,925 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2021-12-28 04:06:21,926 INFO L933 BasicCegarLoop]: 466 mSDtfsCounter, 7 mSDsluCounter, 2784 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 3250 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-28 04:06:21,926 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7 Valid, 3250 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-28 04:06:21,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2021-12-28 04:06:21,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 346. [2021-12-28 04:06:21,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2021-12-28 04:06:21,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2021-12-28 04:06:21,938 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2021-12-28 04:06:21,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-28 04:06:21,938 INFO L470 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2021-12-28 04:06:21,938 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-28 04:06:21,938 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2021-12-28 04:06:21,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-28 04:06:21,940 INFO L506 BasicCegarLoop]: Found error trace [2021-12-28 04:06:21,940 INFO L514 BasicCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-28 04:06:21,969 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-12-28 04:06:22,163 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-28 04:06:22,164 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-28 04:06:22,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-28 04:06:22,164 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2021-12-28 04:06:22,166 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-12-28 04:06:22,166 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [860855056] [2021-12-28 04:06:22,166 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-12-28 04:06:22,166 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-12-28 04:06:22,166 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-12-28 04:06:22,173 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-12-28 04:06:22,174 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-12-28 04:06:27,313 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-12-28 04:06:27,313 INFO L229 tOrderPrioritization]: Conjunction of SSA is sat [2021-12-28 04:06:27,313 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-28 04:06:32,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-28 04:06:33,095 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-12-28 04:06:33,095 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-12-28 04:06:33,096 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-28 04:06:33,157 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-12-28 04:06:33,313 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-12-28 04:06:33,316 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2021-12-28 04:06:33,318 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-28 04:06:33,344 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-28 04:06:33,352 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-12-28 04:06:33,433 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.12 04:06:33 BoogieIcfgContainer [2021-12-28 04:06:33,434 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-28 04:06:33,434 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-28 04:06:33,434 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-28 04:06:33,435 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-28 04:06:33,435 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.12 04:06:17" (3/4) ... [2021-12-28 04:06:33,437 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-12-28 04:06:33,437 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-28 04:06:33,438 INFO L158 Benchmark]: Toolchain (without parser) took 18851.53ms. Allocated memory was 67.1MB in the beginning and 264.2MB in the end (delta: 197.1MB). Free memory was 45.1MB in the beginning and 158.3MB in the end (delta: -113.2MB). Peak memory consumption was 83.6MB. Max. memory is 16.1GB. [2021-12-28 04:06:33,439 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 48.2MB. Free memory was 30.3MB in the beginning and 30.2MB in the end (delta: 45.9kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-28 04:06:33,440 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1245.38ms. Allocated memory was 67.1MB in the beginning and 125.8MB in the end (delta: 58.7MB). Free memory was 45.0MB in the beginning and 73.1MB in the end (delta: -28.1MB). Peak memory consumption was 50.3MB. Max. memory is 16.1GB. [2021-12-28 04:06:33,440 INFO L158 Benchmark]: Boogie Procedure Inliner took 139.88ms. Allocated memory is still 125.8MB. Free memory was 73.1MB in the beginning and 61.1MB in the end (delta: 12.0MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-12-28 04:06:33,440 INFO L158 Benchmark]: Boogie Preprocessor took 131.31ms. Allocated memory is still 125.8MB. Free memory was 61.1MB in the beginning and 70.1MB in the end (delta: -9.0MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. [2021-12-28 04:06:33,440 INFO L158 Benchmark]: RCFGBuilder took 1810.19ms. Allocated memory was 125.8MB in the beginning and 205.5MB in the end (delta: 79.7MB). Free memory was 70.1MB in the beginning and 128.0MB in the end (delta: -57.9MB). Peak memory consumption was 84.6MB. Max. memory is 16.1GB. [2021-12-28 04:06:33,441 INFO L158 Benchmark]: TraceAbstraction took 15517.06ms. Allocated memory was 205.5MB in the beginning and 264.2MB in the end (delta: 58.7MB). Free memory was 126.9MB in the beginning and 158.3MB in the end (delta: -31.4MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. [2021-12-28 04:06:33,441 INFO L158 Benchmark]: Witness Printer took 2.59ms. Allocated memory is still 264.2MB. Free memory is still 158.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-28 04:06:33,442 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 48.2MB. Free memory was 30.3MB in the beginning and 30.2MB in the end (delta: 45.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1245.38ms. Allocated memory was 67.1MB in the beginning and 125.8MB in the end (delta: 58.7MB). Free memory was 45.0MB in the beginning and 73.1MB in the end (delta: -28.1MB). Peak memory consumption was 50.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 139.88ms. Allocated memory is still 125.8MB. Free memory was 73.1MB in the beginning and 61.1MB in the end (delta: 12.0MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 131.31ms. Allocated memory is still 125.8MB. Free memory was 61.1MB in the beginning and 70.1MB in the end (delta: -9.0MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. * RCFGBuilder took 1810.19ms. Allocated memory was 125.8MB in the beginning and 205.5MB in the end (delta: 79.7MB). Free memory was 70.1MB in the beginning and 128.0MB in the end (delta: -57.9MB). Peak memory consumption was 84.6MB. Max. memory is 16.1GB. * TraceAbstraction took 15517.06ms. Allocated memory was 205.5MB in the beginning and 264.2MB in the end (delta: 58.7MB). Free memory was 126.9MB in the beginning and 158.3MB in the end (delta: -31.4MB). Peak memory consumption was 27.3MB. Max. memory is 16.1GB. * Witness Printer took 2.59ms. Allocated memory is still 264.2MB. Free memory is still 158.3MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={58:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=2147483648, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={37:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={37:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={37:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={37:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={37:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={37:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={37:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={58:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=2147483648, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.4s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 44 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 43 mSDsluCounter, 6546 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5134 mSDsCounter, 8 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 46 IncrementalHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 8 mSolverCounterUnsat, 1412 mSDtfsCounter, 46 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 243 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 2 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 6.8s SatisfiabilityAnalysisTime, 0.6s InterpolantComputationTime, 248 NumberOfCodeBlocks, 248 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 238 ConstructedInterpolants, 0 QuantifiedInterpolants, 302 SizeOfPredicates, 4 NumberOfNonLiveVariables, 5843 ConjunctsInSsa, 14 ConjunctsInUnsatCore, 4 InterpolantComputations, 2 PerfectInterpolantSequences, 66/74 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-12-28 04:06:33,483 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample