/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:02:15,249 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:02:15,253 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:02:15,308 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:02:15,308 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:02:15,312 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:02:15,316 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:02:15,324 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:02:15,326 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:02:15,333 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:02:15,334 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:02:15,337 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:02:15,338 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:02:15,340 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:02:15,343 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:02:15,363 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:02:15,366 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:02:15,367 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:02:15,370 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:02:15,379 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:02:15,381 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:02:15,382 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:02:15,384 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:02:15,386 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:02:15,395 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:02:15,396 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:02:15,396 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:02:15,398 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:02:15,399 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:02:15,400 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:02:15,400 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:02:15,401 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:02:15,403 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:02:15,403 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:02:15,405 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:02:15,405 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:02:15,406 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:02:15,406 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:02:15,406 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:02:15,407 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:02:15,408 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:02:15,409 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:02:15,460 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:02:15,460 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:02:15,461 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:02:15,461 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:02:15,463 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:02:15,463 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:02:15,465 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:02:15,466 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:02:15,466 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:02:15,466 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:02:15,467 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:02:15,468 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:02:15,468 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:02:15,468 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:02:15,468 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:02:15,468 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:02:15,469 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:02:15,469 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:02:15,469 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:02:15,469 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:02:15,469 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:02:15,470 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:02:15,470 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:02:15,470 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:02:15,470 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:02:15,471 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:02:15,471 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:02:15,471 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:02:15,471 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:02:15,471 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:02:15,472 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:02:15,472 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:02:15,472 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:02:15,473 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:02:15,875 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:02:15,906 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:02:15,909 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:02:15,911 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:02:15,911 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:02:15,913 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-entry_point.cil.out.i [2022-10-16 13:02:15,994 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/242b9e595/eeb7db425d874163afc4600933f1902d/FLAG0f0893510 [2022-10-16 13:02:17,007 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:02:17,008 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-entry_point.cil.out.i [2022-10-16 13:02:17,070 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/242b9e595/eeb7db425d874163afc4600933f1902d/FLAG0f0893510 [2022-10-16 13:02:17,476 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/242b9e595/eeb7db425d874163afc4600933f1902d [2022-10-16 13:02:17,480 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:02:17,486 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:02:17,489 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:02:17,490 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:02:17,494 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:02:17,495 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:02:17" (1/1) ... [2022-10-16 13:02:17,496 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@53758043 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:17, skipping insertion in model container [2022-10-16 13:02:17,496 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:02:17" (1/1) ... [2022-10-16 13:02:17,503 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:02:17,674 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:02:19,015 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-entry_point.cil.out.i[196736,196749] [2022-10-16 13:02:19,717 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:02:19,742 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:02:20,057 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-entry_point.cil.out.i[196736,196749] [2022-10-16 13:02:20,345 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:02:20,434 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:02:20,434 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20 WrapperNode [2022-10-16 13:02:20,434 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:02:20,436 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:02:20,437 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:02:20,437 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:02:20,446 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,585 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,737 INFO L138 Inliner]: procedures = 201, calls = 1494, calls flagged for inlining = 91, calls inlined = 86, statements flattened = 2664 [2022-10-16 13:02:20,737 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:02:20,738 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:02:20,738 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:02:20,738 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:02:20,748 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,748 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,769 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,770 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,879 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,897 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,926 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,944 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:20,986 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:02:20,988 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:02:20,988 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:02:20,988 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:02:20,989 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (1/1) ... [2022-10-16 13:02:21,008 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:02:21,022 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:02:21,040 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:02:21,061 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:02:21,104 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab32 [2022-10-16 13:02:21,104 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab32 [2022-10-16 13:02:21,104 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_free_iso_urbs [2022-10-16 13:02:21,104 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_free_iso_urbs [2022-10-16 13:02:21,104 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_12 [2022-10-16 13:02:21,104 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_12 [2022-10-16 13:02:21,105 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 13:02:21,105 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 13:02:21,105 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 13:02:21,105 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 13:02:21,105 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_init_dvb [2022-10-16 13:02:21,105 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_init_dvb [2022-10-16 13:02:21,105 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-10-16 13:02:21,106 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-10-16 13:02:21,106 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-10-16 13:02:21,106 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-10-16 13:02:21,106 INFO L130 BoogieDeclarations]: Found specification of procedure dvb_unregister_adapter [2022-10-16 13:02:21,106 INFO L138 BoogieDeclarations]: Found implementation of procedure dvb_unregister_adapter [2022-10-16 13:02:21,106 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:02:21,106 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:02:21,107 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_start_sec_feed [2022-10-16 13:02:21,107 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_start_sec_feed [2022-10-16 13:02:21,107 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-10-16 13:02:21,107 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-10-16 13:02:21,107 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_interruptible_nested [2022-10-16 13:02:21,107 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_interruptible_nested [2022-10-16 13:02:21,107 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_start_iso_xfer [2022-10-16 13:02:21,107 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_start_iso_xfer [2022-10-16 13:02:21,108 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2022-10-16 13:02:21,108 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2022-10-16 13:02:21,108 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:02:21,108 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:02:21,108 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-10-16 13:02:21,108 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-10-16 13:02:21,108 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 13:02:21,109 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 13:02:21,109 INFO L130 BoogieDeclarations]: Found specification of procedure dvb_dmx_release [2022-10-16 13:02:21,109 INFO L138 BoogieDeclarations]: Found implementation of procedure dvb_dmx_release [2022-10-16 13:02:21,109 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-10-16 13:02:21,109 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-10-16 13:02:21,109 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-10-16 13:02:21,109 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-10-16 13:02:21,110 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_process_urb [2022-10-16 13:02:21,110 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_process_urb [2022-10-16 13:02:21,110 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:02:21,110 INFO L130 BoogieDeclarations]: Found specification of procedure input_event [2022-10-16 13:02:21,110 INFO L138 BoogieDeclarations]: Found implementation of procedure input_event [2022-10-16 13:02:21,110 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2022-10-16 13:02:21,110 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2022-10-16 13:02:21,111 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:02:21,111 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-10-16 13:02:21,111 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-10-16 13:02:21,111 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_start_feed [2022-10-16 13:02:21,111 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_start_feed [2022-10-16 13:02:21,111 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:02:21,112 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:02:21,112 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_probe [2022-10-16 13:02:21,112 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_probe [2022-10-16 13:02:21,112 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2022-10-16 13:02:21,112 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2022-10-16 13:02:21,112 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2022-10-16 13:02:21,113 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2022-10-16 13:02:21,113 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_start_ts_feed [2022-10-16 13:02:21,113 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_start_ts_feed [2022-10-16 13:02:21,113 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-10-16 13:02:21,114 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-10-16 13:02:21,114 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2022-10-16 13:02:21,114 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2022-10-16 13:02:21,114 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2022-10-16 13:02:21,114 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2022-10-16 13:02:21,114 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_exit_dvb [2022-10-16 13:02:21,114 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_exit_dvb [2022-10-16 13:02:21,115 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-10-16 13:02:21,115 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-10-16 13:02:21,115 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_set_model [2022-10-16 13:02:21,115 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_set_model [2022-10-16 13:02:21,115 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2022-10-16 13:02:21,115 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2022-10-16 13:02:21,115 INFO L130 BoogieDeclarations]: Found specification of procedure input_report_key [2022-10-16 13:02:21,116 INFO L138 BoogieDeclarations]: Found implementation of procedure input_report_key [2022-10-16 13:02:21,116 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_stop_iso_xfer [2022-10-16 13:02:21,116 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_stop_iso_xfer [2022-10-16 13:02:21,116 INFO L130 BoogieDeclarations]: Found specification of procedure dvb_filter_pes2ts_init [2022-10-16 13:02:21,116 INFO L138 BoogieDeclarations]: Found implementation of procedure dvb_filter_pes2ts_init [2022-10-16 13:02:21,116 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 13:02:21,116 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-16 13:02:21,116 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-16 13:02:21,117 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2022-10-16 13:02:21,117 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2022-10-16 13:02:21,117 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2022-10-16 13:02:21,117 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2022-10-16 13:02:21,117 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 13:02:21,117 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_3 [2022-10-16 13:02:21,117 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_3 [2022-10-16 13:02:21,118 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_4 [2022-10-16 13:02:21,118 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_4 [2022-10-16 13:02:21,118 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_2 [2022-10-16 13:02:21,118 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_2 [2022-10-16 13:02:21,118 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_7 [2022-10-16 13:02:21,118 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_7 [2022-10-16 13:02:21,118 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~X~$Pointer$~X~int~TO~int [2022-10-16 13:02:21,119 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~X~$Pointer$~X~int~TO~int [2022-10-16 13:02:21,119 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-10-16 13:02:21,119 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-10-16 13:02:21,119 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:02:21,119 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-10-16 13:02:21,119 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-10-16 13:02:21,119 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-16 13:02:21,119 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-16 13:02:21,120 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-10-16 13:02:21,120 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-10-16 13:02:21,120 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-16 13:02:21,120 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-16 13:02:21,120 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2022-10-16 13:02:21,120 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2022-10-16 13:02:21,120 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_send_command [2022-10-16 13:02:21,121 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_send_command [2022-10-16 13:02:21,121 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:02:21,121 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_setup_urbs [2022-10-16 13:02:21,121 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_setup_urbs [2022-10-16 13:02:21,121 INFO L130 BoogieDeclarations]: Found specification of procedure input_sync [2022-10-16 13:02:21,121 INFO L138 BoogieDeclarations]: Found implementation of procedure input_sync [2022-10-16 13:02:21,121 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-10-16 13:02:21,122 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-10-16 13:02:21,122 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_set_pids [2022-10-16 13:02:21,122 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_set_pids [2022-10-16 13:02:21,122 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_exit_usb [2022-10-16 13:02:21,122 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_exit_usb [2022-10-16 13:02:21,122 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:02:21,122 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:02:21,123 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-10-16 13:02:21,123 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-10-16 13:02:21,123 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:02:21,123 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:02:21,123 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:02:21,123 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2022-10-16 13:02:21,123 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2022-10-16 13:02:21,123 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_init_rc [2022-10-16 13:02:21,124 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_init_rc [2022-10-16 13:02:21,124 INFO L130 BoogieDeclarations]: Found specification of procedure dvb_dmxdev_release [2022-10-16 13:02:21,124 INFO L138 BoogieDeclarations]: Found implementation of procedure dvb_dmxdev_release [2022-10-16 13:02:21,124 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-10-16 13:02:21,124 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2022-10-16 13:02:21,124 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_disconnect [2022-10-16 13:02:21,124 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_disconnect [2022-10-16 13:02:21,124 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_handle_irq [2022-10-16 13:02:21,125 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_handle_irq [2022-10-16 13:02:21,125 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-10-16 13:02:21,125 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-10-16 13:02:21,125 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:02:21,125 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:02:21,125 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:02:21,908 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:02:21,912 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:02:22,202 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 13:02:28,016 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-10-16 13:02:28,450 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:02:28,468 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:02:28,469 INFO L300 CfgBuilder]: Removed 0 assume(true) statements. [2022-10-16 13:02:28,472 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:02:28 BoogieIcfgContainer [2022-10-16 13:02:28,473 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:02:28,475 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:02:28,476 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:02:28,479 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:02:28,479 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:02:17" (1/3) ... [2022-10-16 13:02:28,480 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58e7b2e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:02:28, skipping insertion in model container [2022-10-16 13:02:28,480 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:02:20" (2/3) ... [2022-10-16 13:02:28,481 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58e7b2e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:02:28, skipping insertion in model container [2022-10-16 13:02:28,481 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:02:28" (3/3) ... [2022-10-16 13:02:28,482 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-entry_point.cil.out.i [2022-10-16 13:02:28,504 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:02:28,505 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 74 error locations. [2022-10-16 13:02:28,591 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:02:28,599 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@cf8e45c, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:02:28,599 INFO L358 AbstractCegarLoop]: Starting to check reachability of 74 error locations. [2022-10-16 13:02:28,610 INFO L276 IsEmpty]: Start isEmpty. Operand has 1220 states, 848 states have (on average 1.3962264150943395) internal successors, (1184), 948 states have internal predecessors, (1184), 231 states have call successors, (231), 68 states have call predecessors, (231), 66 states have return successors, (225), 217 states have call predecessors, (225), 225 states have call successors, (225) [2022-10-16 13:02:28,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-10-16 13:02:28,626 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:02:28,627 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:02:28,628 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 71 more)] === [2022-10-16 13:02:28,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:02:28,634 INFO L85 PathProgramCache]: Analyzing trace with hash 1825786436, now seen corresponding path program 1 times [2022-10-16 13:02:28,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:02:28,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [700032128] [2022-10-16 13:02:28,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:02:28,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:02:29,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:02:29,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:02:29,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:02:29,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:02:29,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:02:29,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-10-16 13:02:29,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:02:29,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:02:29,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-16 13:02:29,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:29,675 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-10-16 13:02:29,676 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:02:29,676 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [700032128] [2022-10-16 13:02:29,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [700032128] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:02:29,678 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:02:29,679 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-16 13:02:29,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1943719101] [2022-10-16 13:02:29,682 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:02:29,687 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:02:29,688 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:02:29,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:02:29,732 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:02:29,738 INFO L87 Difference]: Start difference. First operand has 1220 states, 848 states have (on average 1.3962264150943395) internal successors, (1184), 948 states have internal predecessors, (1184), 231 states have call successors, (231), 68 states have call predecessors, (231), 66 states have return successors, (225), 217 states have call predecessors, (225), 225 states have call successors, (225) Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:02:34,669 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:02:44,153 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:02:44,153 INFO L93 Difference]: Finished difference Result 3140 states and 4505 transitions. [2022-10-16 13:02:44,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-10-16 13:02:44,157 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 65 [2022-10-16 13:02:44,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:02:44,193 INFO L225 Difference]: With dead ends: 3140 [2022-10-16 13:02:44,193 INFO L226 Difference]: Without dead ends: 1872 [2022-10-16 13:02:44,209 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=77, Invalid=163, Unknown=0, NotChecked=0, Total=240 [2022-10-16 13:02:44,213 INFO L413 NwaCegarLoop]: 1515 mSDtfsCounter, 1606 mSDsluCounter, 4267 mSDsCounter, 0 mSdLazyCounter, 3783 mSolverCounterSat, 724 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1721 SdHoareTripleChecker+Valid, 5782 SdHoareTripleChecker+Invalid, 4508 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 724 IncrementalHoareTripleChecker+Valid, 3783 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.6s IncrementalHoareTripleChecker+Time [2022-10-16 13:02:44,214 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1721 Valid, 5782 Invalid, 4508 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [724 Valid, 3783 Invalid, 1 Unknown, 0 Unchecked, 13.6s Time] [2022-10-16 13:02:44,238 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1872 states. [2022-10-16 13:02:44,444 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1872 to 1302. [2022-10-16 13:02:44,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1302 states, 921 states have (on average 1.3702497285559174) internal successors, (1262), 1003 states have internal predecessors, (1262), 237 states have call successors, (237), 76 states have call predecessors, (237), 76 states have return successors, (237), 229 states have call predecessors, (237), 237 states have call successors, (237) [2022-10-16 13:02:44,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1302 states to 1302 states and 1736 transitions. [2022-10-16 13:02:44,465 INFO L78 Accepts]: Start accepts. Automaton has 1302 states and 1736 transitions. Word has length 65 [2022-10-16 13:02:44,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:02:44,466 INFO L495 AbstractCegarLoop]: Abstraction has 1302 states and 1736 transitions. [2022-10-16 13:02:44,466 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:02:44,466 INFO L276 IsEmpty]: Start isEmpty. Operand 1302 states and 1736 transitions. [2022-10-16 13:02:44,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-10-16 13:02:44,471 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:02:44,471 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:02:44,471 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:02:44,472 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ttusb_dec_send_commandErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 71 more)] === [2022-10-16 13:02:44,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:02:44,472 INFO L85 PathProgramCache]: Analyzing trace with hash 1701196720, now seen corresponding path program 1 times [2022-10-16 13:02:44,473 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:02:44,473 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1470061642] [2022-10-16 13:02:44,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:02:44,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:02:44,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:02:44,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:02:44,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:02:44,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:02:44,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:02:44,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-10-16 13:02:44,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-10-16 13:02:44,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:02:44,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:02:44,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:44,960 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-10-16 13:02:44,961 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:02:44,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1470061642] [2022-10-16 13:02:44,962 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1470061642] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:02:44,962 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:02:44,962 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:02:44,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1587387475] [2022-10-16 13:02:44,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:02:44,965 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:02:44,965 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:02:44,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:02:44,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:02:44,971 INFO L87 Difference]: Start difference. First operand 1302 states and 1736 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:02:48,595 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:02:58,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:02:58,793 INFO L93 Difference]: Finished difference Result 4407 states and 6079 transitions. [2022-10-16 13:02:58,793 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:02:58,794 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 73 [2022-10-16 13:02:58,794 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:02:58,819 INFO L225 Difference]: With dead ends: 4407 [2022-10-16 13:02:58,820 INFO L226 Difference]: Without dead ends: 3131 [2022-10-16 13:02:58,827 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:02:58,829 INFO L413 NwaCegarLoop]: 2688 mSDtfsCounter, 2757 mSDsluCounter, 4755 mSDsCounter, 0 mSdLazyCounter, 3256 mSolverCounterSat, 1240 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2983 SdHoareTripleChecker+Valid, 7443 SdHoareTripleChecker+Invalid, 4497 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1240 IncrementalHoareTripleChecker+Valid, 3256 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.2s IncrementalHoareTripleChecker+Time [2022-10-16 13:02:58,829 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2983 Valid, 7443 Invalid, 4497 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1240 Valid, 3256 Invalid, 1 Unknown, 0 Unchecked, 13.2s Time] [2022-10-16 13:02:58,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3131 states. [2022-10-16 13:02:59,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3131 to 2373. [2022-10-16 13:02:59,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2373 states, 1728 states have (on average 1.3721064814814814) internal successors, (2371), 1825 states have internal predecessors, (2371), 436 states have call successors, (436), 141 states have call predecessors, (436), 141 states have return successors, (436), 420 states have call predecessors, (436), 436 states have call successors, (436) [2022-10-16 13:02:59,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2373 states to 2373 states and 3243 transitions. [2022-10-16 13:02:59,121 INFO L78 Accepts]: Start accepts. Automaton has 2373 states and 3243 transitions. Word has length 73 [2022-10-16 13:02:59,122 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:02:59,122 INFO L495 AbstractCegarLoop]: Abstraction has 2373 states and 3243 transitions. [2022-10-16 13:02:59,122 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 3 states have internal predecessors, (42), 2 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:02:59,123 INFO L276 IsEmpty]: Start isEmpty. Operand 2373 states and 3243 transitions. [2022-10-16 13:02:59,127 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2022-10-16 13:02:59,127 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:02:59,127 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:02:59,128 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:02:59,128 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 71 more)] === [2022-10-16 13:02:59,128 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:02:59,129 INFO L85 PathProgramCache]: Analyzing trace with hash -487200967, now seen corresponding path program 1 times [2022-10-16 13:02:59,129 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:02:59,129 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1317273916] [2022-10-16 13:02:59,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:02:59,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:02:59,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:02:59,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:02:59,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:02:59,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:02:59,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:02:59,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-10-16 13:02:59,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-10-16 13:02:59,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-10-16 13:02:59,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:02:59,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-16 13:02:59,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:02:59,702 INFO L134 CoverageAnalysis]: Checked inductivity of 62 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2022-10-16 13:02:59,702 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:02:59,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1317273916] [2022-10-16 13:02:59,703 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1317273916] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:02:59,703 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:02:59,703 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-16 13:02:59,703 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [639398103] [2022-10-16 13:02:59,704 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:02:59,707 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:02:59,707 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:02:59,708 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:02:59,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:02:59,716 INFO L87 Difference]: Start difference. First operand 2373 states and 3243 transitions. Second operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:03:03,728 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:03:14,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:03:14,077 INFO L93 Difference]: Finished difference Result 8989 states and 12960 transitions. [2022-10-16 13:03:14,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-10-16 13:03:14,077 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 84 [2022-10-16 13:03:14,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:03:14,175 INFO L225 Difference]: With dead ends: 8989 [2022-10-16 13:03:14,175 INFO L226 Difference]: Without dead ends: 6646 [2022-10-16 13:03:14,189 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 66 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=117, Invalid=263, Unknown=0, NotChecked=0, Total=380 [2022-10-16 13:03:14,194 INFO L413 NwaCegarLoop]: 2152 mSDtfsCounter, 4833 mSDsluCounter, 3658 mSDsCounter, 0 mSdLazyCounter, 3812 mSolverCounterSat, 3531 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5063 SdHoareTripleChecker+Valid, 5810 SdHoareTripleChecker+Invalid, 7344 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3531 IncrementalHoareTripleChecker+Valid, 3812 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:03:14,198 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5063 Valid, 5810 Invalid, 7344 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3531 Valid, 3812 Invalid, 1 Unknown, 0 Unchecked, 13.4s Time] [2022-10-16 13:03:14,208 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6646 states. [2022-10-16 13:03:14,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6646 to 4436. [2022-10-16 13:03:14,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4436 states, 3274 states have (on average 1.371411117898595) internal successors, (4490), 3401 states have internal predecessors, (4490), 827 states have call successors, (827), 267 states have call predecessors, (827), 267 states have return successors, (827), 795 states have call predecessors, (827), 827 states have call successors, (827) [2022-10-16 13:03:14,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4436 states to 4436 states and 6144 transitions. [2022-10-16 13:03:14,683 INFO L78 Accepts]: Start accepts. Automaton has 4436 states and 6144 transitions. Word has length 84 [2022-10-16 13:03:14,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:03:14,685 INFO L495 AbstractCegarLoop]: Abstraction has 4436 states and 6144 transitions. [2022-10-16 13:03:14,685 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:03:14,685 INFO L276 IsEmpty]: Start isEmpty. Operand 4436 states and 6144 transitions. [2022-10-16 13:03:14,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-10-16 13:03:14,688 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:03:14,689 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:03:14,689 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:03:14,689 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ttusb_dec_send_commandErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 71 more)] === [2022-10-16 13:03:14,690 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:03:14,690 INFO L85 PathProgramCache]: Analyzing trace with hash 850070437, now seen corresponding path program 1 times [2022-10-16 13:03:14,690 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:03:14,690 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1090764770] [2022-10-16 13:03:14,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:03:14,691 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:03:14,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:03:15,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:03:15,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:03:15,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:03:15,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:03:15,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-10-16 13:03:15,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-10-16 13:03:15,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-10-16 13:03:15,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:03:15,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-10-16 13:03:15,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:15,312 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2022-10-16 13:03:15,312 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:03:15,313 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1090764770] [2022-10-16 13:03:15,313 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1090764770] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:03:15,313 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:03:15,313 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:03:15,313 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1886914666] [2022-10-16 13:03:15,314 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:03:15,314 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:03:15,314 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:03:15,315 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:03:15,315 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:03:15,315 INFO L87 Difference]: Start difference. First operand 4436 states and 6144 transitions. Second operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 3 states have internal predecessors, (54), 3 states have call successors, (11), 5 states have call predecessors, (11), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:03:18,348 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:03:27,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:03:27,224 INFO L93 Difference]: Finished difference Result 11541 states and 16910 transitions. [2022-10-16 13:03:27,225 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:03:27,226 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 3 states have internal predecessors, (54), 3 states have call successors, (11), 5 states have call predecessors, (11), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 92 [2022-10-16 13:03:27,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:03:27,294 INFO L225 Difference]: With dead ends: 11541 [2022-10-16 13:03:27,294 INFO L226 Difference]: Without dead ends: 7135 [2022-10-16 13:03:27,344 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:03:27,346 INFO L413 NwaCegarLoop]: 1728 mSDtfsCounter, 3502 mSDsluCounter, 3154 mSDsCounter, 0 mSdLazyCounter, 3208 mSolverCounterSat, 1796 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3746 SdHoareTripleChecker+Valid, 4882 SdHoareTripleChecker+Invalid, 5005 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1796 IncrementalHoareTripleChecker+Valid, 3208 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:03:27,346 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3746 Valid, 4882 Invalid, 5005 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1796 Valid, 3208 Invalid, 1 Unknown, 0 Unchecked, 11.1s Time] [2022-10-16 13:03:27,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7135 states. [2022-10-16 13:03:27,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7135 to 5428. [2022-10-16 13:03:27,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5428 states, 3993 states have (on average 1.32381667918858) internal successors, (5286), 4136 states have internal predecessors, (5286), 1036 states have call successors, (1036), 330 states have call predecessors, (1036), 331 states have return successors, (1090), 996 states have call predecessors, (1090), 1036 states have call successors, (1090) [2022-10-16 13:03:27,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5428 states to 5428 states and 7412 transitions. [2022-10-16 13:03:27,994 INFO L78 Accepts]: Start accepts. Automaton has 5428 states and 7412 transitions. Word has length 92 [2022-10-16 13:03:27,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:03:27,995 INFO L495 AbstractCegarLoop]: Abstraction has 5428 states and 7412 transitions. [2022-10-16 13:03:27,995 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 3 states have internal predecessors, (54), 3 states have call successors, (11), 5 states have call predecessors, (11), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:03:27,996 INFO L276 IsEmpty]: Start isEmpty. Operand 5428 states and 7412 transitions. [2022-10-16 13:03:28,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-10-16 13:03:28,000 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:03:28,001 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:03:28,001 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:03:28,001 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 71 more)] === [2022-10-16 13:03:28,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:03:28,002 INFO L85 PathProgramCache]: Analyzing trace with hash -574622334, now seen corresponding path program 1 times [2022-10-16 13:03:28,002 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:03:28,002 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [124272582] [2022-10-16 13:03:28,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:03:28,002 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:03:28,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:03:28,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:03:28,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:03:28,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:03:28,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:03:28,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-10-16 13:03:28,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-10-16 13:03:28,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:03:28,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:03:28,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-10-16 13:03:28,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:03:28,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:03:28,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:28,650 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 66 trivial. 0 not checked. [2022-10-16 13:03:28,651 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:03:28,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [124272582] [2022-10-16 13:03:28,656 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [124272582] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:03:28,656 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:03:28,656 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:03:28,656 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2069262709] [2022-10-16 13:03:28,656 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:03:28,658 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-16 13:03:28,658 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:03:28,658 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-16 13:03:28,659 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:03:28,659 INFO L87 Difference]: Start difference. First operand 5428 states and 7412 transitions. Second operand has 7 states, 6 states have (on average 9.5) internal successors, (57), 3 states have internal predecessors, (57), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-16 13:03:32,500 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:03:41,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:03:41,190 INFO L93 Difference]: Finished difference Result 10339 states and 15025 transitions. [2022-10-16 13:03:41,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-10-16 13:03:41,191 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 9.5) internal successors, (57), 3 states have internal predecessors, (57), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 100 [2022-10-16 13:03:41,192 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:03:41,284 INFO L225 Difference]: With dead ends: 10339 [2022-10-16 13:03:41,284 INFO L226 Difference]: Without dead ends: 10337 [2022-10-16 13:03:41,290 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=49, Invalid=83, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:03:41,293 INFO L413 NwaCegarLoop]: 2157 mSDtfsCounter, 3762 mSDsluCounter, 3071 mSDsCounter, 0 mSdLazyCounter, 2696 mSolverCounterSat, 2482 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4008 SdHoareTripleChecker+Valid, 5228 SdHoareTripleChecker+Invalid, 5179 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2482 IncrementalHoareTripleChecker+Valid, 2696 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:03:41,294 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4008 Valid, 5228 Invalid, 5179 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2482 Valid, 2696 Invalid, 1 Unknown, 0 Unchecked, 11.5s Time] [2022-10-16 13:03:41,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10337 states. [2022-10-16 13:03:42,156 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10337 to 7540. [2022-10-16 13:03:42,186 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7540 states, 5575 states have (on average 1.3196412556053811) internal successors, (7357), 5749 states have internal predecessors, (7357), 1433 states have call successors, (1433), 458 states have call predecessors, (1433), 464 states have return successors, (1497), 1381 states have call predecessors, (1497), 1433 states have call successors, (1497) [2022-10-16 13:03:42,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7540 states to 7540 states and 10287 transitions. [2022-10-16 13:03:42,231 INFO L78 Accepts]: Start accepts. Automaton has 7540 states and 10287 transitions. Word has length 100 [2022-10-16 13:03:42,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:03:42,232 INFO L495 AbstractCegarLoop]: Abstraction has 7540 states and 10287 transitions. [2022-10-16 13:03:42,233 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 9.5) internal successors, (57), 3 states have internal predecessors, (57), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-16 13:03:42,233 INFO L276 IsEmpty]: Start isEmpty. Operand 7540 states and 10287 transitions. [2022-10-16 13:03:42,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 120 [2022-10-16 13:03:42,236 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:03:42,236 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:03:42,236 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 13:03:42,237 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 71 more)] === [2022-10-16 13:03:42,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:03:42,237 INFO L85 PathProgramCache]: Analyzing trace with hash 1443928095, now seen corresponding path program 1 times [2022-10-16 13:03:42,237 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:03:42,238 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1863976734] [2022-10-16 13:03:42,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:03:42,238 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:03:42,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:03:43,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:03:43,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:03:43,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:03:43,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:03:43,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-10-16 13:03:43,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-10-16 13:03:43,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-10-16 13:03:43,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-10-16 13:03:43,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:03:43,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:03:43,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-10-16 13:03:43,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2022-10-16 13:03:43,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-10-16 13:03:43,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:43,453 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 67 trivial. 0 not checked. [2022-10-16 13:03:43,453 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:03:43,453 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1863976734] [2022-10-16 13:03:43,453 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1863976734] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:03:43,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [954876726] [2022-10-16 13:03:43,454 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:03:43,454 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:03:43,454 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:03:43,457 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:03:43,471 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 13:03:44,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:44,037 INFO L263 TraceCheckSpWp]: Trace formula consists of 1976 conjuncts, 47 conjunts are in the unsatisfiable core [2022-10-16 13:03:44,052 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:03:44,448 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 67 trivial. 0 not checked. [2022-10-16 13:03:44,449 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:03:44,449 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [954876726] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:03:44,449 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:03:44,450 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [9] total 16 [2022-10-16 13:03:44,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1712703378] [2022-10-16 13:03:44,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:03:44,451 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-10-16 13:03:44,451 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:03:44,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-10-16 13:03:44,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=30, Invalid=210, Unknown=0, NotChecked=0, Total=240 [2022-10-16 13:03:44,452 INFO L87 Difference]: Start difference. First operand 7540 states and 10287 transitions. Second operand has 10 states, 10 states have (on average 7.0) internal successors, (70), 7 states have internal predecessors, (70), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2022-10-16 13:03:45,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:03:45,632 INFO L93 Difference]: Finished difference Result 15132 states and 20929 transitions. [2022-10-16 13:03:45,632 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-10-16 13:03:45,633 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 7.0) internal successors, (70), 7 states have internal predecessors, (70), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) Word has length 119 [2022-10-16 13:03:45,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:03:45,673 INFO L225 Difference]: With dead ends: 15132 [2022-10-16 13:03:45,673 INFO L226 Difference]: Without dead ends: 7637 [2022-10-16 13:03:45,722 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 137 SyntacticMatches, 1 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=34, Invalid=238, Unknown=0, NotChecked=0, Total=272 [2022-10-16 13:03:45,723 INFO L413 NwaCegarLoop]: 1577 mSDtfsCounter, 4 mSDsluCounter, 12576 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 14153 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:03:45,724 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4 Valid, 14153 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-16 13:03:45,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7637 states. [2022-10-16 13:03:46,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7637 to 7617. [2022-10-16 13:03:46,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7617 states, 5631 states have (on average 1.3164624400639318) internal successors, (7413), 5805 states have internal predecessors, (7413), 1433 states have call successors, (1433), 458 states have call predecessors, (1433), 485 states have return successors, (1583), 1402 states have call predecessors, (1583), 1433 states have call successors, (1583) [2022-10-16 13:03:46,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7617 states to 7617 states and 10429 transitions. [2022-10-16 13:03:46,633 INFO L78 Accepts]: Start accepts. Automaton has 7617 states and 10429 transitions. Word has length 119 [2022-10-16 13:03:46,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:03:46,634 INFO L495 AbstractCegarLoop]: Abstraction has 7617 states and 10429 transitions. [2022-10-16 13:03:46,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 7.0) internal successors, (70), 7 states have internal predecessors, (70), 2 states have call successors, (16), 2 states have call predecessors, (16), 5 states have return successors, (14), 5 states have call predecessors, (14), 2 states have call successors, (14) [2022-10-16 13:03:46,635 INFO L276 IsEmpty]: Start isEmpty. Operand 7617 states and 10429 transitions. [2022-10-16 13:03:46,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-10-16 13:03:46,638 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:03:46,638 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:03:46,683 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-16 13:03:46,852 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-10-16 13:03:46,852 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 71 more)] === [2022-10-16 13:03:46,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:03:46,853 INFO L85 PathProgramCache]: Analyzing trace with hash -506494928, now seen corresponding path program 1 times [2022-10-16 13:03:46,853 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:03:46,853 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [363374895] [2022-10-16 13:03:46,854 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:03:46,854 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:03:46,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:03:47,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:03:47,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:03:47,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:03:47,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:03:47,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-10-16 13:03:47,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-10-16 13:03:47,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-10-16 13:03:47,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-10-16 13:03:47,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:03:47,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:03:47,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:03:47,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-16 13:03:47,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-10-16 13:03:47,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2022-10-16 13:03:47,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:47,881 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 67 trivial. 0 not checked. [2022-10-16 13:03:47,881 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:03:47,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [363374895] [2022-10-16 13:03:47,882 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [363374895] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:03:47,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1657061120] [2022-10-16 13:03:47,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:03:47,882 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:03:47,883 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:03:47,884 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:03:47,910 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 13:03:48,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:48,436 INFO L263 TraceCheckSpWp]: Trace formula consists of 2002 conjuncts, 17 conjunts are in the unsatisfiable core [2022-10-16 13:03:48,444 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:03:48,568 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-10-16 13:03:48,568 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:03:48,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1657061120] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:03:48,569 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:03:48,569 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 9 [2022-10-16 13:03:48,569 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1381427853] [2022-10-16 13:03:48,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:03:48,570 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:03:48,570 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:03:48,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:03:48,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:03:48,571 INFO L87 Difference]: Start difference. First operand 7617 states and 10429 transitions. Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:03:49,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:03:49,220 INFO L93 Difference]: Finished difference Result 15205 states and 21055 transitions. [2022-10-16 13:03:49,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:03:49,221 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 125 [2022-10-16 13:03:49,221 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:03:49,260 INFO L225 Difference]: With dead ends: 15205 [2022-10-16 13:03:49,260 INFO L226 Difference]: Without dead ends: 7619 [2022-10-16 13:03:49,303 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 151 SyntacticMatches, 2 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:03:49,304 INFO L413 NwaCegarLoop]: 1577 mSDtfsCounter, 0 mSDsluCounter, 4719 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 6296 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:03:49,304 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 6296 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:03:49,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7619 states. [2022-10-16 13:03:50,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7619 to 7617. [2022-10-16 13:03:50,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7617 states, 5631 states have (on average 1.3164624400639318) internal successors, (7413), 5805 states have internal predecessors, (7413), 1433 states have call successors, (1433), 458 states have call predecessors, (1433), 485 states have return successors, (1576), 1402 states have call predecessors, (1576), 1433 states have call successors, (1576) [2022-10-16 13:03:50,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7617 states to 7617 states and 10422 transitions. [2022-10-16 13:03:50,079 INFO L78 Accepts]: Start accepts. Automaton has 7617 states and 10422 transitions. Word has length 125 [2022-10-16 13:03:50,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:03:50,080 INFO L495 AbstractCegarLoop]: Abstraction has 7617 states and 10422 transitions. [2022-10-16 13:03:50,080 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:03:50,081 INFO L276 IsEmpty]: Start isEmpty. Operand 7617 states and 10422 transitions. [2022-10-16 13:03:50,084 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2022-10-16 13:03:50,084 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:03:50,085 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:03:50,128 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 13:03:50,298 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-10-16 13:03:50,299 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 71 more)] === [2022-10-16 13:03:50,299 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:03:50,300 INFO L85 PathProgramCache]: Analyzing trace with hash -1147827135, now seen corresponding path program 1 times [2022-10-16 13:03:50,300 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:03:50,300 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [754730953] [2022-10-16 13:03:50,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:03:50,301 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:03:50,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:50,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:03:50,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:50,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-16 13:03:50,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:50,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-16 13:03:50,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:50,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-16 13:03:50,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:50,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-10-16 13:03:50,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-10-16 13:03:51,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-10-16 13:03:51,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-10-16 13:03:51,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:03:51,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-16 13:03:51,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:03:51,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:03:51,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:03:51,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2022-10-16 13:03:51,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-10-16 13:03:51,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-10-16 13:03:51,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:03:51,305 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-10-16 13:03:51,305 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:03:51,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [754730953] [2022-10-16 13:03:51,306 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [754730953] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:03:51,306 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:03:51,306 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-16 13:03:51,306 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [980844946] [2022-10-16 13:03:51,307 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:03:51,307 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:03:51,307 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:03:51,308 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:03:51,308 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:03:51,308 INFO L87 Difference]: Start difference. First operand 7617 states and 10422 transitions. Second operand has 8 states, 8 states have (on average 9.0) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 6 states have call predecessors, (17), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:03:55,262 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:04:02,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:02,319 INFO L93 Difference]: Finished difference Result 18201 states and 26555 transitions. [2022-10-16 13:04:02,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-10-16 13:04:02,325 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.0) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 6 states have call predecessors, (17), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 131 [2022-10-16 13:04:02,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:02,377 INFO L225 Difference]: With dead ends: 18201 [2022-10-16 13:04:02,378 INFO L226 Difference]: Without dead ends: 10597 [2022-10-16 13:04:02,405 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=122, Unknown=0, NotChecked=0, Total=182 [2022-10-16 13:04:02,406 INFO L413 NwaCegarLoop]: 1443 mSDtfsCounter, 2241 mSDsluCounter, 3938 mSDsCounter, 0 mSdLazyCounter, 2957 mSolverCounterSat, 1521 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2321 SdHoareTripleChecker+Valid, 5381 SdHoareTripleChecker+Invalid, 4479 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1521 IncrementalHoareTripleChecker+Valid, 2957 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.9s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:02,406 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2321 Valid, 5381 Invalid, 4479 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1521 Valid, 2957 Invalid, 1 Unknown, 0 Unchecked, 9.9s Time] [2022-10-16 13:04:02,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10597 states. [2022-10-16 13:04:03,135 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10597 to 7628. [2022-10-16 13:04:03,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7628 states, 5641 states have (on average 1.3159014359156178) internal successors, (7423), 5816 states have internal predecessors, (7423), 1433 states have call successors, (1433), 458 states have call predecessors, (1433), 486 states have return successors, (1580), 1402 states have call predecessors, (1580), 1433 states have call successors, (1580) [2022-10-16 13:04:03,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7628 states to 7628 states and 10436 transitions. [2022-10-16 13:04:03,184 INFO L78 Accepts]: Start accepts. Automaton has 7628 states and 10436 transitions. Word has length 131 [2022-10-16 13:04:03,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:03,185 INFO L495 AbstractCegarLoop]: Abstraction has 7628 states and 10436 transitions. [2022-10-16 13:04:03,185 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.0) internal successors, (72), 4 states have internal predecessors, (72), 2 states have call successors, (17), 6 states have call predecessors, (17), 2 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:04:03,185 INFO L276 IsEmpty]: Start isEmpty. Operand 7628 states and 10436 transitions. [2022-10-16 13:04:03,188 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2022-10-16 13:04:03,188 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:03,188 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:03,188 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-16 13:04:03,189 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 71 more)] === [2022-10-16 13:04:03,189 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:03,189 INFO L85 PathProgramCache]: Analyzing trace with hash 1361569864, now seen corresponding path program 1 times [2022-10-16 13:04:03,189 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:03,190 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986247020] [2022-10-16 13:04:03,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:03,190 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:03,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:04:03,474 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:04:03,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:04:03,834 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:04:03,834 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:04:03,837 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (73 of 74 remaining) [2022-10-16 13:04:03,839 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_process_urbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (72 of 74 remaining) [2022-10-16 13:04:03,840 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_process_urbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (71 of 74 remaining) [2022-10-16 13:04:03,840 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_free_iso_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (70 of 74 remaining) [2022-10-16 13:04:03,841 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_free_iso_urbsErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (69 of 74 remaining) [2022-10-16 13:04:03,841 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~intErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (68 of 74 remaining) [2022-10-16 13:04:03,841 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~intErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (67 of 74 remaining) [2022-10-16 13:04:03,841 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~intErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (66 of 74 remaining) [2022-10-16 13:04:03,841 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~intErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (65 of 74 remaining) [2022-10-16 13:04:03,841 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (64 of 74 remaining) [2022-10-16 13:04:03,842 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_sec_feedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (63 of 74 remaining) [2022-10-16 13:04:03,842 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_sec_feedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (62 of 74 remaining) [2022-10-16 13:04:03,842 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_init_rcErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (61 of 74 remaining) [2022-10-16 13:04:03,842 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_init_rcErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (60 of 74 remaining) [2022-10-16 13:04:03,843 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (59 of 74 remaining) [2022-10-16 13:04:03,843 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (58 of 74 remaining) [2022-10-16 13:04:03,843 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (57 of 74 remaining) [2022-10-16 13:04:03,843 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (56 of 74 remaining) [2022-10-16 13:04:03,843 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (55 of 74 remaining) [2022-10-16 13:04:03,844 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (54 of 74 remaining) [2022-10-16 13:04:03,844 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (53 of 74 remaining) [2022-10-16 13:04:03,844 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (52 of 74 remaining) [2022-10-16 13:04:03,844 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (51 of 74 remaining) [2022-10-16 13:04:03,844 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (50 of 74 remaining) [2022-10-16 13:04:03,845 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (49 of 74 remaining) [2022-10-16 13:04:03,845 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (48 of 74 remaining) [2022-10-16 13:04:03,845 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (47 of 74 remaining) [2022-10-16 13:04:03,846 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (46 of 74 remaining) [2022-10-16 13:04:03,846 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (45 of 74 remaining) [2022-10-16 13:04:03,846 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (44 of 74 remaining) [2022-10-16 13:04:03,846 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (43 of 74 remaining) [2022-10-16 13:04:03,846 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_probeErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (42 of 74 remaining) [2022-10-16 13:04:03,847 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_iso_xferErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (41 of 74 remaining) [2022-10-16 13:04:03,847 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_iso_xferErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (40 of 74 remaining) [2022-10-16 13:04:03,847 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_iso_xferErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (39 of 74 remaining) [2022-10-16 13:04:03,847 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_iso_xferErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (38 of 74 remaining) [2022-10-16 13:04:03,847 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_iso_xferErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (37 of 74 remaining) [2022-10-16 13:04:03,847 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_iso_xferErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (36 of 74 remaining) [2022-10-16 13:04:03,848 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_iso_xferErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (35 of 74 remaining) [2022-10-16 13:04:03,848 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_iso_xferErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (34 of 74 remaining) [2022-10-16 13:04:03,848 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_send_commandErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (33 of 74 remaining) [2022-10-16 13:04:03,848 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_send_commandErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (32 of 74 remaining) [2022-10-16 13:04:03,849 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_send_commandErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (31 of 74 remaining) [2022-10-16 13:04:03,849 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_send_commandErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (30 of 74 remaining) [2022-10-16 13:04:03,849 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_send_commandErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (29 of 74 remaining) [2022-10-16 13:04:03,849 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_send_commandErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (28 of 74 remaining) [2022-10-16 13:04:03,849 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_send_commandErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 74 remaining) [2022-10-16 13:04:03,850 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_send_commandErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 74 remaining) [2022-10-16 13:04:03,850 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_setup_urbsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 74 remaining) [2022-10-16 13:04:03,850 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_setup_urbsErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 74 remaining) [2022-10-16 13:04:03,850 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_setup_urbsErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 74 remaining) [2022-10-16 13:04:03,850 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_setup_urbsErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 74 remaining) [2022-10-16 13:04:03,851 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_setup_urbsErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 74 remaining) [2022-10-16 13:04:03,851 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_setup_urbsErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 74 remaining) [2022-10-16 13:04:03,852 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_setup_urbsErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 74 remaining) [2022-10-16 13:04:03,853 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_setup_urbsErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 74 remaining) [2022-10-16 13:04:03,853 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_ts_feedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 74 remaining) [2022-10-16 13:04:03,853 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_start_ts_feedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 74 remaining) [2022-10-16 13:04:03,853 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __fswab16Err0ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 74 remaining) [2022-10-16 13:04:03,853 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __fswab16Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 74 remaining) [2022-10-16 13:04:03,854 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_handle_irqErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 74 remaining) [2022-10-16 13:04:03,854 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_handle_irqErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 74 remaining) [2022-10-16 13:04:03,854 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_handle_irqErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 74 remaining) [2022-10-16 13:04:03,854 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_handle_irqErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 74 remaining) [2022-10-16 13:04:03,854 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_exit_usbErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 74 remaining) [2022-10-16 13:04:03,855 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_exit_usbErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 74 remaining) [2022-10-16 13:04:03,855 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_stop_iso_xferErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 74 remaining) [2022-10-16 13:04:03,855 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_stop_iso_xferErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 74 remaining) [2022-10-16 13:04:03,855 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_stop_iso_xferErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 74 remaining) [2022-10-16 13:04:03,855 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ttusb_dec_stop_iso_xferErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 74 remaining) [2022-10-16 13:04:03,855 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 74 remaining) [2022-10-16 13:04:03,856 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 74 remaining) [2022-10-16 13:04:03,857 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 74 remaining) [2022-10-16 13:04:03,857 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 74 remaining) [2022-10-16 13:04:03,857 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-16 13:04:03,862 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:03,868 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:04:03,979 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:04:04,265 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:04:04 BoogieIcfgContainer [2022-10-16 13:04:04,265 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:04:04,266 INFO L158 Benchmark]: Toolchain (without parser) took 106784.52ms. Allocated memory was 152.0MB in the beginning and 994.1MB in the end (delta: 842.0MB). Free memory was 113.5MB in the beginning and 765.0MB in the end (delta: -651.5MB). Peak memory consumption was 221.5MB. Max. memory is 8.0GB. [2022-10-16 13:04:04,266 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 152.0MB. Free memory is still 123.3MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:04:04,267 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2945.46ms. Allocated memory was 152.0MB in the beginning and 199.2MB in the end (delta: 47.2MB). Free memory was 113.4MB in the beginning and 111.1MB in the end (delta: 2.2MB). Peak memory consumption was 102.0MB. Max. memory is 8.0GB. [2022-10-16 13:04:04,268 INFO L158 Benchmark]: Boogie Procedure Inliner took 300.87ms. Allocated memory is still 199.2MB. Free memory was 111.1MB in the beginning and 129.5MB in the end (delta: -18.4MB). Peak memory consumption was 11.0MB. Max. memory is 8.0GB. [2022-10-16 13:04:04,268 INFO L158 Benchmark]: Boogie Preprocessor took 248.53ms. Allocated memory is still 199.2MB. Free memory was 129.5MB in the beginning and 105.9MB in the end (delta: 23.6MB). Peak memory consumption was 23.1MB. Max. memory is 8.0GB. [2022-10-16 13:04:04,268 INFO L158 Benchmark]: RCFGBuilder took 7485.26ms. Allocated memory was 199.2MB in the beginning and 319.8MB in the end (delta: 120.6MB). Free memory was 105.9MB in the beginning and 129.2MB in the end (delta: -23.3MB). Peak memory consumption was 121.1MB. Max. memory is 8.0GB. [2022-10-16 13:04:04,269 INFO L158 Benchmark]: TraceAbstraction took 95790.10ms. Allocated memory was 319.8MB in the beginning and 994.1MB in the end (delta: 674.2MB). Free memory was 128.1MB in the beginning and 765.0MB in the end (delta: -636.9MB). Peak memory consumption was 67.3MB. Max. memory is 8.0GB. [2022-10-16 13:04:04,272 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 152.0MB. Free memory is still 123.3MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 2945.46ms. Allocated memory was 152.0MB in the beginning and 199.2MB in the end (delta: 47.2MB). Free memory was 113.4MB in the beginning and 111.1MB in the end (delta: 2.2MB). Peak memory consumption was 102.0MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 300.87ms. Allocated memory is still 199.2MB. Free memory was 111.1MB in the beginning and 129.5MB in the end (delta: -18.4MB). Peak memory consumption was 11.0MB. Max. memory is 8.0GB. * Boogie Preprocessor took 248.53ms. Allocated memory is still 199.2MB. Free memory was 129.5MB in the beginning and 105.9MB in the end (delta: 23.6MB). Peak memory consumption was 23.1MB. Max. memory is 8.0GB. * RCFGBuilder took 7485.26ms. Allocated memory was 199.2MB in the beginning and 319.8MB in the end (delta: 120.6MB). Free memory was 105.9MB in the beginning and 129.2MB in the end (delta: -23.3MB). Peak memory consumption was 121.1MB. Max. memory is 8.0GB. * TraceAbstraction took 95790.10ms. Allocated memory was 319.8MB in the beginning and 994.1MB in the end (delta: 674.2MB). Free memory was 128.1MB in the beginning and 765.0MB in the end (delta: -636.9MB). Peak memory consumption was 67.3MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 6722]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 9066, overapproximation of bitwiseOr at line 6752. Possible FailurePath: [L6841] int LDV_IN_INTERRUPT = 1; [L6842] int ldv_state_variable_2 ; [L6843] int ref_cnt ; [L6844] int ldv_state_variable_1 ; [L6845] int usb_counter ; [L6846] struct usb_interface *ttusb_dec_driver_group1 ; [L6847] int ldv_state_variable_0 ; [L7028] static int debug ; [L7029] static int output_pva ; [L7030] static int enable_rc ; [L7031-L7033] static short adapter_nr[8U] = { -1, -1, -1, -1, -1, -1, -1, -1}; [L7034-L7041] static u16 rc_keys[26U] = { 116U, 113U, 2U, 3U, 4U, 5U, 6U, 7U, 8U, 9U, 10U, 11U, 402U, 114U, 352U, 115U, 403U, 412U, 1U, 398U, 399U, 400U, 401U, 357U, 50U, 385U}; [L8912] static struct ttusbdecfe_config fe_config = {& fe_send_command}; [L9047-L9055] static struct usb_device_id ttusb_dec_table[4U] = { {3U, 2888U, 4102U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2888U, 4104U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2888U, 4105U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L9056-L9061] static struct usb_driver ttusb_dec_driver = {"ttusb-dec", & ttusb_dec_probe, & ttusb_dec_disconnect, 0, 0, 0, 0, 0, 0, (struct usb_device_id const *)(& ttusb_dec_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0}; [L9077] struct usb_device_id const __mod_usb_device_table ; [L9078] int ldv_retval_0 ; [L9079] int ldv_retval_1 ; [L9359] int INTERF_STATE = 0; [L9360] int SERIAL_STATE = 0; [L9361] void *usb_intfdata = 0; [L9362] struct urb *usb_urb = 0; [L9363] struct usb_device *usb_dev = 0; [L9364] int dev_counter = 0; [L9365] int completeFnIntCounter = 0; [L9366] int completeFnBulkCounter = 0; [L9367] void (*completeFnInt)(struct urb * ) ; [L9368] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9093] struct usb_device_id *ldvarg0 ; [L9094] void *tmp ; [L9095] u8 *ldvarg1 ; [L9096] void *tmp___0 ; [L9097] int ldvarg4 ; [L9098] int tmp___1 ; [L9099] struct dvb_frontend *ldvarg3 ; [L9100] void *tmp___2 ; [L9101] u8 ldvarg5 ; [L9102] u8 *ldvarg2 ; [L9103] void *tmp___3 ; [L9104] int *ldvarg6 ; [L9105] void *tmp___4 ; [L9106] int tmp___5 ; [L9107] int tmp___6 ; [L9108] int tmp___7 ; [L9109] int tmp___8 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9111] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6783] void *p ; [L6784] void *tmp ; [L6785] int tmp___0 ; [L6787] tmp___0 = __VERIFIER_nondet_int() [L6788] COND TRUE tmp___0 != 0 [L6789] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9111] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9111] tmp = ldv_zalloc(32UL) [L9112] ldvarg0 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9113] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6783] void *p ; [L6784] void *tmp ; [L6785] int tmp___0 ; [L6787] tmp___0 = __VERIFIER_nondet_int() [L6788] COND TRUE tmp___0 != 0 [L6789] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9113] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9113] tmp___0 = ldv_zalloc(1UL) [L9114] ldvarg1 = (u8 *)tmp___0 [L9115] tmp___1 = __VERIFIER_nondet_int() [L9116] ldvarg4 = tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=-2, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9117] CALL, EXPR ldv_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6783] void *p ; [L6784] void *tmp ; [L6785] int tmp___0 ; [L6787] tmp___0 = __VERIFIER_nondet_int() [L6788] COND TRUE tmp___0 != 0 [L6789] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp___0=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9117] RET, EXPR ldv_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1288UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg4=-2, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9117] tmp___2 = ldv_zalloc(1288UL) [L9118] ldvarg3 = (struct dvb_frontend *)tmp___2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9119] CALL, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6783] void *p ; [L6784] void *tmp ; [L6785] int tmp___0 ; [L6787] tmp___0 = __VERIFIER_nondet_int() [L6788] COND TRUE tmp___0 != 0 [L6789] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=1, tmp___0=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9119] RET, EXPR ldv_zalloc(1UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9119] tmp___3 = ldv_zalloc(1UL) [L9120] ldvarg2 = (u8 *)tmp___3 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9121] CALL, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6783] void *p ; [L6784] void *tmp ; [L6785] int tmp___0 ; [L6787] tmp___0 = __VERIFIER_nondet_int() [L6788] COND TRUE tmp___0 != 0 [L6789] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=4, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=4, tmp___0=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9121] RET, EXPR ldv_zalloc(4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9121] tmp___4 = ldv_zalloc(4UL) [L9122] ldvarg6 = (int *)tmp___4 [L9123] FCALL ldv_initialize() [L9124] FCALL memset((void *)(& ldvarg5), 0, 1UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, ldvarg6={0:0}, memset((void *)(& ldvarg5), 0, 1UL)={154:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9125] ldv_state_variable_1 = 0 [L9126] ref_cnt = 0 [L9127] ldv_state_variable_0 = 1 [L9128] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, ldvarg6={0:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9130] tmp___5 = __VERIFIER_nondet_int() [L9132] case 0: [L9162] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, ldvarg6={0:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9163] COND TRUE ldv_state_variable_0 != 0 [L9164] tmp___7 = __VERIFIER_nondet_int() [L9166] case 0: [L9174] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, ldvarg6={0:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5=1, tmp___7=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9175] COND TRUE ldv_state_variable_0 == 1 [L9176] CALL, EXPR ttusb_dec_driver_init() [L9064] int tmp ; [L9066] CALL, EXPR ldv_usb_register_driver_15(& ttusb_dec_driver, & __this_module, "ttusb_dec") [L9331] ldv_func_ret_type ldv_func_res ; [L9332] int tmp ; [L9334] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9745] return __VERIFIER_nondet_int(); [L9334] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9334] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9335] ldv_func_res = tmp [L9336] ldv_state_variable_1 = 1 [L9337] usb_counter = 0 [L9338] CALL ldv_usb_driver_1() [L9084] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9086] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6783] void *p ; [L6784] void *tmp ; [L6785] int tmp___0 ; [L6787] tmp___0 = __VERIFIER_nondet_int() [L6788] COND TRUE tmp___0 != 0 [L6789] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9086] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_zalloc(1520UL)={0:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9086] tmp = ldv_zalloc(1520UL) [L9087] ttusb_dec_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9338] RET ldv_usb_driver_1() [L9339] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, ldv_func_arg1={151:0}, ldv_func_arg1={151:0}, ldv_func_arg2={2147483649:2147483651}, ldv_func_arg2={2147483649:2147483651}, ldv_func_arg3={146:0}, ldv_func_arg3={146:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9066] RET, EXPR ldv_usb_register_driver_15(& ttusb_dec_driver, & __this_module, "ttusb_dec") [L9066] tmp = ldv_usb_register_driver_15(& ttusb_dec_driver, & __this_module, "ttusb_dec") [L9067] return (tmp); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9176] RET, EXPR ttusb_dec_driver_init() [L9176] ldv_retval_1 = ttusb_dec_driver_init() [L9177] COND TRUE ldv_retval_1 == 0 [L9178] ldv_state_variable_0 = 3 [L9179] ldv_state_variable_2 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, ldvarg6={0:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5=1, tmp___7=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9182] COND FALSE !(ldv_retval_1 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, ldvarg6={0:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5=1, tmp___7=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9130] tmp___5 = __VERIFIER_nondet_int() [L9132] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, ldvarg6={0:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5=0, tmp___7=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9133] COND TRUE ldv_state_variable_1 != 0 [L9134] tmp___6 = __VERIFIER_nondet_int() [L9136] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, ldvarg6={0:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5=0, tmp___6=0, tmp___7=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9137] COND TRUE ldv_state_variable_1 == 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1={0:0}, ldvarg2={0:0}, ldvarg3={0:0}, ldvarg4=-2, ldvarg5={154:0}, ldvarg6={0:0}, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3={0:0}, tmp___4={0:0}, tmp___5=0, tmp___6=0, tmp___7=1, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9138] CALL ttusb_dec_probe(ttusb_dec_driver_group1, (struct usb_device_id const *)ldvarg0) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8915] struct usb_device *udev ; [L8916] struct ttusb_dec *dec ; [L8917] void *tmp ; [L8918] int tmp___0 ; [L8919] int tmp___1 ; [L8920] int tmp___2 ; VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, id={0:0}, id={0:0}, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8922] COND FALSE !(debug != 0) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, id={0:0}, id={0:0}, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8926] CALL, EXPR interface_to_usbdev(intf) [L9228] struct usb_device *tmp ; [L9230] CALL, EXPR ldv_interface_to_usbdev() [L9472] void *result ; [L9473] void *tmp ; VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9475] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=1181, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6766] void *p ; [L6767] void *tmp ; [L6768] int tmp___0 ; [L6770] tmp___0 = __VERIFIER_nondet_int() [L6771] COND FALSE !(tmp___0 != 0) [L6774] tmp = malloc(size) [L6775] p = tmp VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=1181, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, p={-8589934591:0}, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=1181, tmp={-8589934591:0}, tmp___0=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6776] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(cond)=1, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6762] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(cond)=1, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6776] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=1181, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, p={-8589934591:0}, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=1181, tmp={-8589934591:0}, tmp___0=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6777] return (p); VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=1181, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, \result={-8589934591:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, p={-8589934591:0}, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=1181, tmp={-8589934591:0}, tmp___0=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9475] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-8589934591:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9475] tmp = ldv_malloc(sizeof(struct usb_device)) [L9476] result = tmp VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, result={-8589934591:0}, SERIAL_STATE=0, tmp={-8589934591:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9477] COND TRUE (unsigned long )result != (unsigned long )((void *)0) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, result={-8589934591:0}, SERIAL_STATE=0, tmp={-8589934591:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9481] return (result); VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, \result={-8589934591:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, result={-8589934591:0}, SERIAL_STATE=0, tmp={-8589934591:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9230] RET, EXPR ldv_interface_to_usbdev() [L9230] tmp = ldv_interface_to_usbdev() [L9231] return (tmp); VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, \result={-8589934591:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-8589934591:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8926] RET, EXPR interface_to_usbdev(intf) [L8926] udev = interface_to_usbdev(intf) [L8927] CALL, EXPR kzalloc(15656UL, 208U) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(flags)=208, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6750] void *tmp ; VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(flags)=208, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, flags=208, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=15656, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6752] CALL, EXPR kmalloc(size, flags | 32768U) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6741] void *tmp___2 ; [L6743] CALL, EXPR __kmalloc(size, flags) [L6736] CALL, EXPR ldv_malloc(size) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6766] void *p ; [L6767] void *tmp ; [L6768] int tmp___0 ; [L6770] tmp___0 = __VERIFIER_nondet_int() [L6771] COND FALSE !(tmp___0 != 0) [L6774] tmp = malloc(size) [L6775] p = tmp VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, p={-4294967295:0}, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=15656, tmp={-4294967295:0}, tmp___0=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6776] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(cond)=1, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6762] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(cond)=1, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6776] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, p={-4294967295:0}, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=15656, tmp={-4294967295:0}, tmp___0=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6777] return (p); VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, \result={-4294967295:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, p={-4294967295:0}, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=15656, tmp={-4294967295:0}, tmp___0=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6736] RET, EXPR ldv_malloc(size) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(t)=2147483652, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(size)={-4294967295:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=15656, t=2147483652, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6736] return ldv_malloc(size); [L6743] RET, EXPR __kmalloc(size, flags) [L6743] tmp___2 = __kmalloc(size, flags) [L6744] return (tmp___2); VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(flags)=2147483652, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, \result={-4294967295:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, flags=2147483652, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=15656, tmp___2={-4294967295:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6752] RET, EXPR kmalloc(size, flags | 32768U) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(flags)=208, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, flags=208, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, kmalloc(size, flags | 32768U)={-4294967295:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=15656, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6752] tmp = kmalloc(size, flags | 32768U) [L6753] return (tmp); VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(flags)=208, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(size)=15656, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, \result={-4294967295:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, flags=208, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, size=15656, tmp={-4294967295:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8927] RET, EXPR kzalloc(15656UL, 208U) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, id={0:0}, id={0:0}, INTERF_STATE=0, intf={0:0}, intf={0:0}, kzalloc(15656UL, 208U)={-4294967295:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8927] tmp = kzalloc(15656UL, 208U) [L8928] dec = (struct ttusb_dec *)tmp VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dec={-4294967295:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, id={0:0}, id={0:0}, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-4294967295:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8929] COND FALSE !((unsigned long )dec == (unsigned long )((struct ttusb_dec *)0)) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dec={-4294967295:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, id={0:0}, id={0:0}, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-4294967295:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8934] CALL ldv_usb_set_intfdata_12(intf, (void *)dec) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L9316] CALL ldv_usb_set_intfdata(data) [L9378] usb_intfdata = data VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, data={-4294967295:0}, data={-4294967295:0}, debug=0, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L9316] RET ldv_usb_set_intfdata(data) [L8934] RET ldv_usb_set_intfdata_12(intf, (void *)dec) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dec={-4294967295:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, id={0:0}, id={0:0}, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-4294967295:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L8935] id->idProduct [L8936] case 4102: [L8939] case 4104: [L8942] case 4105: VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dec={-4294967295:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, id={0:0}, id={0:0}, id->idProduct=155, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-4294967295:0}, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L8947] dec->udev = udev [L8948] CALL ttusb_dec_init_usb(dec) [L8432] struct lock_class_key __key ; [L8433] struct lock_class_key __key___0 ; [L8434] unsigned int tmp ; [L8435] unsigned int tmp___0 ; [L8436] unsigned int tmp___1 ; [L8437] unsigned int tmp___2 ; [L8438] int tmp___3 ; VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __key={152:0}, __key___0={156:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dec={-4294967295:0}, dec={-4294967295:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L8440] COND FALSE !(debug != 0) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __key={152:0}, __key___0={156:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dec={-4294967295:0}, dec={-4294967295:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L8444] FCALL __mutex_init(& dec->usb_mutex, "&dec->usb_mutex", & __key) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __key={152:0}, __key___0={156:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dec={-4294967295:0}, dec={-4294967295:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L8445] FCALL __mutex_init(& dec->iso_mutex, "&dec->iso_mutex", & __key___0) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __key={152:0}, __key___0={156:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dec={-4294967295:0}, dec={-4294967295:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L8446] EXPR dec->udev VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __key={152:0}, __key___0={156:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dec={-4294967295:0}, dec={-4294967295:0}, dec->udev={-8589934591:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L8446] CALL __create_pipe(dec->udev, 3U) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(endpoint)=3, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev={-8589934591:0}, dev_counter=0, enable_rc=0, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L6722] EXPR dev->devnum VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(endpoint)=3, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev={-8589934591:0}, dev={-8589934591:0}, dev->devnum=8388608, dev_counter=0, enable_rc=0, endpoint=3, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] [L6722] dev->devnum << 8 VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(endpoint)=3, \old(gfp = gfp & 4294967288U)=2147483654, \old(gfp = gfp | 1U)=2147483653, \old(gfp = gfp | 4U)=2147483650, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={2147483649:2147483651}, adapter_nr={147:0}, completeFnBulkCounter=0, completeFnIntCounter=0, debug=0, dev={-8589934591:0}, dev={-8589934591:0}, dev->devnum=8388608, dev_counter=0, enable_rc=0, endpoint=3, fe_config={149:0}, gfp = gfp & 4294967288U=2147483654, gfp = gfp | 1U=2147483653, gfp = gfp | 4U=2147483650, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, output_pva=0, rc_keys={148:0}, ref_cnt=0, SERIAL_STATE=0, ttusb_dec_driver={151:0}, ttusb_dec_driver_group1={0:0}, ttusb_dec_table={150:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={-4294967295:0}, usb_urb={0:0}] - UnprovableResult [Line: 7802]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7802]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8306]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8306]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8245]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8245]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8269]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8269]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6722]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8191]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8191]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8394]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8394]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9423]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9423]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8345]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8345]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7107]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7107]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7107]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7107]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8623]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8623]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8630]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8630]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8637]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8637]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8637]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8637]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8641]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8641]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7968]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7968]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7969]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7969]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7979]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7979]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7987]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7987]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7149]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7149]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7164]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7164]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7166]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7166]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7198]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7198]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7850]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7850]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7856]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7856]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7857]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7857]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7863]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7863]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8091]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8091]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6563]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6563]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7076]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7076]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7079]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7079]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8836]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8836]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7886]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7886]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7892]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7892]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9141]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9141]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9151]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9151]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 69 procedures, 1222 locations, 74 error locations. Started 1 CEGAR loops. OverallTime: 95.3s, OverallIterations: 9, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 80.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 6 mSolverCounterUnknown, 19846 SdHoareTripleChecker+Valid, 72.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 18705 mSDsluCounter, 54975 SdHoareTripleChecker+Invalid, 67.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 40138 mSDsCounter, 11294 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 19811 IncrementalHoareTripleChecker+Invalid, 31111 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 11294 mSolverCounterUnsat, 14837 mSDtfsCounter, 19811 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 530 GetRequests, 435 SyntacticMatches, 3 SemanticMatches, 92 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 157 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=7628occurred in iteration=8, InterpolantAutomatonStates: 89, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.0s AutomataMinimizationTime, 8 MinimizatonAttempts, 11033 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.3s SatisfiabilityAnalysisTime, 5.9s InterpolantComputationTime, 1165 NumberOfCodeBlocks, 1165 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 1023 ConstructedInterpolants, 0 QuantifiedInterpolants, 2233 SizeOfPredicates, 15 NumberOfNonLiveVariables, 3978 ConjunctsInSsa, 64 ConjunctsInUnsatCore, 10 InterpolantComputations, 8 PerfectInterpolantSequences, 618/622 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 13:04:04,326 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...