/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:04:06,933 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:04:06,936 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:04:06,997 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:04:06,998 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:04:07,001 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:04:07,005 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:04:07,013 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:04:07,015 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:04:07,021 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:04:07,022 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:04:07,024 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:04:07,025 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:04:07,027 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:04:07,029 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:04:07,034 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:04:07,035 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:04:07,037 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:04:07,040 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:04:07,046 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:04:07,051 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:04:07,052 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:04:07,054 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:04:07,055 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:04:07,058 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:04:07,059 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:04:07,059 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:04:07,060 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:04:07,060 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:04:07,061 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:04:07,062 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:04:07,062 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:04:07,063 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:04:07,064 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:04:07,065 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:04:07,065 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:04:07,066 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:04:07,066 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:04:07,067 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:04:07,068 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:04:07,068 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:04:07,069 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:04:07,096 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:04:07,096 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:04:07,096 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:04:07,097 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:04:07,097 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:04:07,098 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:04:07,098 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:04:07,099 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:04:07,099 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:04:07,099 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:04:07,099 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:04:07,099 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:04:07,100 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:04:07,100 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:04:07,100 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:04:07,100 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:04:07,100 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:04:07,100 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:04:07,101 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:04:07,101 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:04:07,101 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:04:07,101 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:04:07,101 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:04:07,102 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:04:07,102 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:04:07,102 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:04:07,102 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:04:07,102 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:04:07,103 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:04:07,103 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:04:07,103 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:04:07,103 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:04:07,103 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:04:07,104 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:04:07,438 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:04:07,473 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:04:07,478 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:04:07,479 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:04:07,480 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:04:07,481 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i [2022-10-16 13:04:07,561 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/695c92de3/3e319bf869c34e7885ecdbb6e23d63fc/FLAG62e293922 [2022-10-16 13:04:08,531 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:04:08,532 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i [2022-10-16 13:04:08,604 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/695c92de3/3e319bf869c34e7885ecdbb6e23d63fc/FLAG62e293922 [2022-10-16 13:04:08,999 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/695c92de3/3e319bf869c34e7885ecdbb6e23d63fc [2022-10-16 13:04:09,002 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:04:09,008 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:04:09,012 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:04:09,013 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:04:09,020 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:04:09,021 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:04:09" (1/1) ... [2022-10-16 13:04:09,023 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1d431aed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:09, skipping insertion in model container [2022-10-16 13:04:09,023 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:04:09" (1/1) ... [2022-10-16 13:04:09,031 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:04:09,186 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:04:10,298 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i[182154,182167] [2022-10-16 13:04:11,001 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:04:11,038 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:04:11,326 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i[182154,182167] [2022-10-16 13:04:11,517 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:04:11,688 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:04:11,690 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11 WrapperNode [2022-10-16 13:04:11,690 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:04:11,691 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:04:11,691 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:04:11,692 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:04:11,700 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:11,781 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:11,937 INFO L138 Inliner]: procedures = 174, calls = 1340, calls flagged for inlining = 82, calls inlined = 66, statements flattened = 2631 [2022-10-16 13:04:11,937 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:04:11,938 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:04:11,938 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:04:11,938 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:04:11,951 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:11,951 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:11,986 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:11,987 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:12,102 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:12,135 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:12,163 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:12,184 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:12,210 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:04:12,211 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:04:12,211 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:04:12,211 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:04:12,212 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (1/1) ... [2022-10-16 13:04:12,219 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:04:12,231 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:04:12,248 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:04:12,273 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:04:12,315 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_reset_device [2022-10-16 13:04:12,316 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_reset_device [2022-10-16 13:04:12,316 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_resume [2022-10-16 13:04:12,316 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_resume [2022-10-16 13:04:12,316 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 13:04:12,316 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2022-10-16 13:04:12,316 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2022-10-16 13:04:12,317 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_12 [2022-10-16 13:04:12,317 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_12 [2022-10-16 13:04:12,317 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 13:04:12,317 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 13:04:12,317 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 13:04:12,317 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 13:04:12,317 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:04:12,318 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-10-16 13:04:12,318 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-10-16 13:04:12,318 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-10-16 13:04:12,318 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-10-16 13:04:12,318 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-10-16 13:04:12,318 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-10-16 13:04:12,318 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-16 13:04:12,319 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-16 13:04:12,319 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:04:12,319 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:04:12,319 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-10-16 13:04:12,319 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-10-16 13:04:12,319 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_submit_rx_urb_fwload [2022-10-16 13:04:12,319 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_submit_rx_urb_fwload [2022-10-16 13:04:12,320 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-10-16 13:04:12,320 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-10-16 13:04:12,320 INFO L130 BoogieDeclarations]: Found specification of procedure activate_suitable_timer_1 [2022-10-16 13:04:12,320 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_suitable_timer_1 [2022-10-16 13:04:12,320 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_submit_rx_urb [2022-10-16 13:04:12,320 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_submit_rx_urb [2022-10-16 13:04:12,320 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_receive_fwload [2022-10-16 13:04:12,321 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_receive_fwload [2022-10-16 13:04:12,321 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-16 13:04:12,321 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-16 13:04:12,321 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_send_fw_pkt [2022-10-16 13:04:12,321 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_send_fw_pkt [2022-10-16 13:04:12,321 INFO L130 BoogieDeclarations]: Found specification of procedure __if_usb_submit_rx_urb [2022-10-16 13:04:12,321 INFO L138 BoogieDeclarations]: Found implementation of procedure __if_usb_submit_rx_urb [2022-10-16 13:04:12,321 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:04:12,322 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:04:12,322 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:04:12,322 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_free [2022-10-16 13:04:12,322 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_free [2022-10-16 13:04:12,322 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-10-16 13:04:12,322 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-10-16 13:04:12,322 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-10-16 13:04:12,323 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-10-16 13:04:12,323 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 13:04:12,323 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 13:04:12,323 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:04:12,323 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-10-16 13:04:12,323 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-10-16 13:04:12,324 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_disconnect [2022-10-16 13:04:12,324 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_disconnect [2022-10-16 13:04:12,324 INFO L130 BoogieDeclarations]: Found specification of procedure usb_tx_block [2022-10-16 13:04:12,324 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_tx_block [2022-10-16 13:04:12,324 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:04:12,325 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_timer_1 [2022-10-16 13:04:12,325 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_timer_1 [2022-10-16 13:04:12,325 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_9 [2022-10-16 13:04:12,325 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_9 [2022-10-16 13:04:12,325 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-10-16 13:04:12,325 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-10-16 13:04:12,325 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:04:12,326 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:04:12,326 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-10-16 13:04:12,326 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:04:12,326 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:04:12,326 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_8 [2022-10-16 13:04:12,326 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_8 [2022-10-16 13:04:12,327 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2022-10-16 13:04:12,327 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2022-10-16 13:04:12,327 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:04:12,327 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_13 [2022-10-16 13:04:12,327 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_13 [2022-10-16 13:04:12,327 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-10-16 13:04:12,327 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-10-16 13:04:12,328 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-10-16 13:04:12,328 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-10-16 13:04:12,328 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_15 [2022-10-16 13:04:12,328 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_15 [2022-10-16 13:04:12,328 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:04:12,328 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:04:12,328 INFO L130 BoogieDeclarations]: Found specification of procedure kfree_skb [2022-10-16 13:04:12,329 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree_skb [2022-10-16 13:04:12,329 INFO L130 BoogieDeclarations]: Found specification of procedure lbs_remove_card [2022-10-16 13:04:12,329 INFO L138 BoogieDeclarations]: Found implementation of procedure lbs_remove_card [2022-10-16 13:04:12,329 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2022-10-16 13:04:12,329 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2022-10-16 13:04:12,329 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2022-10-16 13:04:12,329 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2022-10-16 13:04:12,329 INFO L130 BoogieDeclarations]: Found specification of procedure if_usb_receive [2022-10-16 13:04:12,330 INFO L138 BoogieDeclarations]: Found implementation of procedure if_usb_receive [2022-10-16 13:04:12,330 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-10-16 13:04:12,330 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-10-16 13:04:12,330 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:04:12,330 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-10-16 13:04:12,330 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-10-16 13:04:12,330 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 13:04:12,331 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-10-16 13:04:12,331 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-10-16 13:04:12,331 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:04:12,331 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:04:13,095 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:04:13,104 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:04:13,538 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 13:04:14,562 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-10-16 13:04:15,864 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:04:15,888 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:04:15,888 INFO L300 CfgBuilder]: Removed 0 assume(true) statements. [2022-10-16 13:04:15,894 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:04:15 BoogieIcfgContainer [2022-10-16 13:04:15,894 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:04:15,898 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:04:15,899 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:04:15,902 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:04:15,903 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:04:09" (1/3) ... [2022-10-16 13:04:15,903 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a9a14de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:04:15, skipping insertion in model container [2022-10-16 13:04:15,904 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:04:11" (2/3) ... [2022-10-16 13:04:15,906 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1a9a14de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:04:15, skipping insertion in model container [2022-10-16 13:04:15,907 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:04:15" (3/3) ... [2022-10-16 13:04:15,911 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-3.12-rc1.tar.xz-144_2a-drivers--net--wireless--libertas--usb8xxx.ko-entry_point.cil.out.i [2022-10-16 13:04:15,939 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:04:15,944 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 20 error locations. [2022-10-16 13:04:16,066 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:04:16,076 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5b2506c3, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:04:16,077 INFO L358 AbstractCegarLoop]: Starting to check reachability of 20 error locations. [2022-10-16 13:04:16,086 INFO L276 IsEmpty]: Start isEmpty. Operand has 864 states, 622 states have (on average 1.3938906752411575) internal successors, (867), 671 states have internal predecessors, (867), 178 states have call successors, (178), 45 states have call predecessors, (178), 43 states have return successors, (172), 166 states have call predecessors, (172), 172 states have call successors, (172) [2022-10-16 13:04:16,104 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-10-16 13:04:16,105 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:16,105 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:16,106 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:16,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:16,111 INFO L85 PathProgramCache]: Analyzing trace with hash 1292343624, now seen corresponding path program 1 times [2022-10-16 13:04:16,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:16,122 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1142186244] [2022-10-16 13:04:16,123 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:16,123 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:16,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:16,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:16,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:16,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:16,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:16,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-10-16 13:04:16,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:16,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-10-16 13:04:16,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:17,095 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-16 13:04:17,096 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:17,096 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1142186244] [2022-10-16 13:04:17,097 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1142186244] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:17,098 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:17,098 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:04:17,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1250626745] [2022-10-16 13:04:17,102 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:17,109 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:04:17,109 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:17,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:04:17,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:04:17,158 INFO L87 Difference]: Start difference. First operand has 864 states, 622 states have (on average 1.3938906752411575) internal successors, (867), 671 states have internal predecessors, (867), 178 states have call successors, (178), 45 states have call predecessors, (178), 43 states have return successors, (172), 166 states have call predecessors, (172), 172 states have call successors, (172) Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (8), 5 states have call predecessors, (8), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-16 13:04:19,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:19,988 INFO L93 Difference]: Finished difference Result 2089 states and 3044 transitions. [2022-10-16 13:04:19,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-16 13:04:19,992 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (8), 5 states have call predecessors, (8), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-10-16 13:04:19,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:20,050 INFO L225 Difference]: With dead ends: 2089 [2022-10-16 13:04:20,050 INFO L226 Difference]: Without dead ends: 1177 [2022-10-16 13:04:20,071 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:04:20,078 INFO L413 NwaCegarLoop]: 1121 mSDtfsCounter, 1431 mSDsluCounter, 1928 mSDsCounter, 0 mSdLazyCounter, 1316 mSolverCounterSat, 878 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1484 SdHoareTripleChecker+Valid, 3049 SdHoareTripleChecker+Invalid, 2194 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 878 IncrementalHoareTripleChecker+Valid, 1316 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:20,080 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1484 Valid, 3049 Invalid, 2194 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [878 Valid, 1316 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2022-10-16 13:04:20,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1177 states. [2022-10-16 13:04:20,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1177 to 898. [2022-10-16 13:04:20,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 898 states, 657 states have (on average 1.386605783866058) internal successors, (911), 698 states have internal predecessors, (911), 174 states have call successors, (174), 47 states have call predecessors, (174), 47 states have return successors, (174), 165 states have call predecessors, (174), 174 states have call successors, (174) [2022-10-16 13:04:20,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 898 states to 898 states and 1259 transitions. [2022-10-16 13:04:20,308 INFO L78 Accepts]: Start accepts. Automaton has 898 states and 1259 transitions. Word has length 55 [2022-10-16 13:04:20,308 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:20,309 INFO L495 AbstractCegarLoop]: Abstraction has 898 states and 1259 transitions. [2022-10-16 13:04:20,309 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (8), 5 states have call predecessors, (8), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-16 13:04:20,309 INFO L276 IsEmpty]: Start isEmpty. Operand 898 states and 1259 transitions. [2022-10-16 13:04:20,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-10-16 13:04:20,322 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:20,323 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:20,323 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:04:20,323 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:20,324 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:20,325 INFO L85 PathProgramCache]: Analyzing trace with hash 1348207627, now seen corresponding path program 1 times [2022-10-16 13:04:20,325 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:20,326 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [358749514] [2022-10-16 13:04:20,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:20,326 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:20,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:20,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:20,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:04:20,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-16 13:04:20,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:04:20,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:20,901 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-10-16 13:04:20,901 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:20,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [358749514] [2022-10-16 13:04:20,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [358749514] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:20,902 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:20,902 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:04:20,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1052587335] [2022-10-16 13:04:20,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:20,906 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:04:20,906 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:20,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:04:20,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:04:20,907 INFO L87 Difference]: Start difference. First operand 898 states and 1259 transitions. Second operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 3 states have internal predecessors, (54), 3 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-10-16 13:04:25,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:25,001 INFO L93 Difference]: Finished difference Result 2814 states and 4027 transitions. [2022-10-16 13:04:25,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:04:25,002 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 3 states have internal predecessors, (54), 3 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 71 [2022-10-16 13:04:25,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:25,018 INFO L225 Difference]: With dead ends: 2814 [2022-10-16 13:04:25,019 INFO L226 Difference]: Without dead ends: 1939 [2022-10-16 13:04:25,024 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:04:25,026 INFO L413 NwaCegarLoop]: 1575 mSDtfsCounter, 2341 mSDsluCounter, 2037 mSDsCounter, 0 mSdLazyCounter, 1744 mSolverCounterSat, 1357 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2463 SdHoareTripleChecker+Valid, 3612 SdHoareTripleChecker+Invalid, 3101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1357 IncrementalHoareTripleChecker+Valid, 1744 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.7s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:25,026 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2463 Valid, 3612 Invalid, 3101 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1357 Valid, 1744 Invalid, 0 Unknown, 0 Unchecked, 3.7s Time] [2022-10-16 13:04:25,030 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1939 states. [2022-10-16 13:04:25,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1939 to 1440. [2022-10-16 13:04:25,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1440 states, 1058 states have (on average 1.3818525519848772) internal successors, (1462), 1114 states have internal predecessors, (1462), 282 states have call successors, (282), 80 states have call predecessors, (282), 80 states have return successors, (282), 267 states have call predecessors, (282), 282 states have call successors, (282) [2022-10-16 13:04:25,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1440 states to 1440 states and 2026 transitions. [2022-10-16 13:04:25,146 INFO L78 Accepts]: Start accepts. Automaton has 1440 states and 2026 transitions. Word has length 71 [2022-10-16 13:04:25,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:25,147 INFO L495 AbstractCegarLoop]: Abstraction has 1440 states and 2026 transitions. [2022-10-16 13:04:25,148 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 3 states have internal predecessors, (54), 3 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-10-16 13:04:25,148 INFO L276 IsEmpty]: Start isEmpty. Operand 1440 states and 2026 transitions. [2022-10-16 13:04:25,150 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-10-16 13:04:25,150 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:25,150 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:25,151 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:04:25,151 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:25,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:25,152 INFO L85 PathProgramCache]: Analyzing trace with hash 1075457063, now seen corresponding path program 1 times [2022-10-16 13:04:25,152 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:25,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [240342030] [2022-10-16 13:04:25,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:25,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:25,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:25,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:25,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:25,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:25,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:25,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:04:25,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:25,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:04:25,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:25,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:25,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:25,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:04:25,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:25,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:25,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:25,657 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-10-16 13:04:25,658 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:25,658 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [240342030] [2022-10-16 13:04:25,658 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [240342030] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:25,660 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:25,660 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:04:25,661 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663504930] [2022-10-16 13:04:25,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:25,661 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:04:25,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:25,662 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:04:25,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:04:25,663 INFO L87 Difference]: Start difference. First operand 1440 states and 2026 transitions. Second operand has 6 states, 5 states have (on average 10.4) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-16 13:04:29,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:29,985 INFO L93 Difference]: Finished difference Result 2988 states and 4307 transitions. [2022-10-16 13:04:29,985 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:04:29,985 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 10.4) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 74 [2022-10-16 13:04:29,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:30,007 INFO L225 Difference]: With dead ends: 2988 [2022-10-16 13:04:30,007 INFO L226 Difference]: Without dead ends: 2986 [2022-10-16 13:04:30,009 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:04:30,011 INFO L413 NwaCegarLoop]: 1537 mSDtfsCounter, 2127 mSDsluCounter, 2691 mSDsCounter, 0 mSdLazyCounter, 2284 mSolverCounterSat, 1173 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2256 SdHoareTripleChecker+Valid, 4228 SdHoareTripleChecker+Invalid, 3457 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1173 IncrementalHoareTripleChecker+Valid, 2284 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:30,011 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2256 Valid, 4228 Invalid, 3457 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1173 Valid, 2284 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2022-10-16 13:04:30,016 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2986 states. [2022-10-16 13:04:30,151 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2986 to 2239. [2022-10-16 13:04:30,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2239 states, 1656 states have (on average 1.3804347826086956) internal successors, (2286), 1734 states have internal predecessors, (2286), 440 states have call successors, (440), 123 states have call predecessors, (440), 123 states have return successors, (440), 416 states have call predecessors, (440), 440 states have call successors, (440) [2022-10-16 13:04:30,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2239 states to 2239 states and 3166 transitions. [2022-10-16 13:04:30,173 INFO L78 Accepts]: Start accepts. Automaton has 2239 states and 3166 transitions. Word has length 74 [2022-10-16 13:04:30,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:30,173 INFO L495 AbstractCegarLoop]: Abstraction has 2239 states and 3166 transitions. [2022-10-16 13:04:30,174 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 10.4) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-10-16 13:04:30,174 INFO L276 IsEmpty]: Start isEmpty. Operand 2239 states and 3166 transitions. [2022-10-16 13:04:30,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-10-16 13:04:30,177 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:30,177 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:30,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:04:30,178 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:30,178 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:30,178 INFO L85 PathProgramCache]: Analyzing trace with hash -1677218393, now seen corresponding path program 1 times [2022-10-16 13:04:30,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:30,179 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1985986194] [2022-10-16 13:04:30,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:30,179 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:30,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:30,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:30,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:04:30,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:04:30,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:30,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:04:30,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:30,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-10-16 13:04:30,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-10-16 13:04:30,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:30,785 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-10-16 13:04:30,786 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:30,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1985986194] [2022-10-16 13:04:30,786 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1985986194] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:30,786 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:30,786 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-16 13:04:30,787 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1474245015] [2022-10-16 13:04:30,787 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:30,789 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:04:30,789 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:30,789 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:04:30,790 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:04:30,790 INFO L87 Difference]: Start difference. First operand 2239 states and 3166 transitions. Second operand has 8 states, 8 states have (on average 8.75) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:04:34,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:34,432 INFO L93 Difference]: Finished difference Result 6360 states and 9361 transitions. [2022-10-16 13:04:34,432 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-10-16 13:04:34,432 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.75) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 96 [2022-10-16 13:04:34,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:34,466 INFO L225 Difference]: With dead ends: 6360 [2022-10-16 13:04:34,466 INFO L226 Difference]: Without dead ends: 4198 [2022-10-16 13:04:34,479 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:04:34,480 INFO L413 NwaCegarLoop]: 1560 mSDtfsCounter, 2440 mSDsluCounter, 4939 mSDsCounter, 0 mSdLazyCounter, 2532 mSolverCounterSat, 1038 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2533 SdHoareTripleChecker+Valid, 6499 SdHoareTripleChecker+Invalid, 3570 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1038 IncrementalHoareTripleChecker+Valid, 2532 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:34,481 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2533 Valid, 6499 Invalid, 3570 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1038 Valid, 2532 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-10-16 13:04:34,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4198 states. [2022-10-16 13:04:34,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4198 to 2245. [2022-10-16 13:04:34,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2245 states, 1662 states have (on average 1.3790613718411553) internal successors, (2292), 1740 states have internal predecessors, (2292), 440 states have call successors, (440), 123 states have call predecessors, (440), 123 states have return successors, (440), 416 states have call predecessors, (440), 440 states have call successors, (440) [2022-10-16 13:04:34,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2245 states to 2245 states and 3172 transitions. [2022-10-16 13:04:34,701 INFO L78 Accepts]: Start accepts. Automaton has 2245 states and 3172 transitions. Word has length 96 [2022-10-16 13:04:34,701 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:34,702 INFO L495 AbstractCegarLoop]: Abstraction has 2245 states and 3172 transitions. [2022-10-16 13:04:34,702 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.75) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:04:34,702 INFO L276 IsEmpty]: Start isEmpty. Operand 2245 states and 3172 transitions. [2022-10-16 13:04:34,705 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-10-16 13:04:34,705 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:34,705 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:34,705 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:04:34,706 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:34,706 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:34,706 INFO L85 PathProgramCache]: Analyzing trace with hash 1784904397, now seen corresponding path program 1 times [2022-10-16 13:04:34,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:34,707 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1502499168] [2022-10-16 13:04:34,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:34,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:34,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:35,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:35,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:04:35,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:04:35,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:35,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:04:35,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:35,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-10-16 13:04:35,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-10-16 13:04:35,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:35,239 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-10-16 13:04:35,239 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:35,239 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1502499168] [2022-10-16 13:04:35,239 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1502499168] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:35,240 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:35,240 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-16 13:04:35,240 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1747760050] [2022-10-16 13:04:35,240 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:35,241 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:04:35,241 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:35,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:04:35,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:04:35,242 INFO L87 Difference]: Start difference. First operand 2245 states and 3172 transitions. Second operand has 6 states, 5 states have (on average 14.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:04:38,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:38,065 INFO L93 Difference]: Finished difference Result 3454 states and 5077 transitions. [2022-10-16 13:04:38,071 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:04:38,071 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 14.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-10-16 13:04:38,072 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:38,097 INFO L225 Difference]: With dead ends: 3454 [2022-10-16 13:04:38,097 INFO L226 Difference]: Without dead ends: 3452 [2022-10-16 13:04:38,100 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:04:38,101 INFO L413 NwaCegarLoop]: 1283 mSDtfsCounter, 1131 mSDsluCounter, 2744 mSDsCounter, 0 mSdLazyCounter, 1705 mSolverCounterSat, 593 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1225 SdHoareTripleChecker+Valid, 4027 SdHoareTripleChecker+Invalid, 2298 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 593 IncrementalHoareTripleChecker+Valid, 1705 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:38,102 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1225 Valid, 4027 Invalid, 2298 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [593 Valid, 1705 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2022-10-16 13:04:38,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3452 states. [2022-10-16 13:04:38,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3452 to 2357. [2022-10-16 13:04:38,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2357 states, 1750 states have (on average 1.3771428571428572) internal successors, (2410), 1828 states have internal predecessors, (2410), 464 states have call successors, (464), 123 states have call predecessors, (464), 123 states have return successors, (464), 440 states have call predecessors, (464), 464 states have call successors, (464) [2022-10-16 13:04:38,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2357 states to 2357 states and 3338 transitions. [2022-10-16 13:04:38,357 INFO L78 Accepts]: Start accepts. Automaton has 2357 states and 3338 transitions. Word has length 98 [2022-10-16 13:04:38,358 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:38,359 INFO L495 AbstractCegarLoop]: Abstraction has 2357 states and 3338 transitions. [2022-10-16 13:04:38,359 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 14.0) internal successors, (70), 3 states have internal predecessors, (70), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:04:38,359 INFO L276 IsEmpty]: Start isEmpty. Operand 2357 states and 3338 transitions. [2022-10-16 13:04:38,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2022-10-16 13:04:38,371 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:38,371 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:38,371 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 13:04:38,371 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:38,372 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:38,372 INFO L85 PathProgramCache]: Analyzing trace with hash -654343940, now seen corresponding path program 1 times [2022-10-16 13:04:38,372 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:38,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [575986049] [2022-10-16 13:04:38,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:38,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:38,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:38,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:38,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:04:38,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:04:38,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:38,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:04:38,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:38,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-10-16 13:04:38,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2022-10-16 13:04:38,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:38,770 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-10-16 13:04:38,770 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:38,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [575986049] [2022-10-16 13:04:38,771 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [575986049] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:38,771 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:38,771 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:04:38,771 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [271507271] [2022-10-16 13:04:38,771 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:38,773 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:04:38,773 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:38,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:04:38,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:04:38,774 INFO L87 Difference]: Start difference. First operand 2357 states and 3338 transitions. Second operand has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (13), 5 states have call predecessors, (13), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:04:41,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:41,413 INFO L93 Difference]: Finished difference Result 4740 states and 6799 transitions. [2022-10-16 13:04:41,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:04:41,414 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (13), 5 states have call predecessors, (13), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 111 [2022-10-16 13:04:41,414 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:41,437 INFO L225 Difference]: With dead ends: 4740 [2022-10-16 13:04:41,437 INFO L226 Difference]: Without dead ends: 3264 [2022-10-16 13:04:41,446 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:04:41,447 INFO L413 NwaCegarLoop]: 1185 mSDtfsCounter, 1446 mSDsluCounter, 1896 mSDsCounter, 0 mSdLazyCounter, 1367 mSolverCounterSat, 885 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1505 SdHoareTripleChecker+Valid, 3081 SdHoareTripleChecker+Invalid, 2252 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 885 IncrementalHoareTripleChecker+Valid, 1367 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:41,447 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1505 Valid, 3081 Invalid, 2252 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [885 Valid, 1367 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-10-16 13:04:41,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3264 states. [2022-10-16 13:04:41,663 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3264 to 2516. [2022-10-16 13:04:41,669 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2516 states, 1873 states have (on average 1.376401494927923) internal successors, (2578), 1956 states have internal predecessors, (2578), 486 states have call successors, (486), 137 states have call predecessors, (486), 137 states have return successors, (486), 459 states have call predecessors, (486), 486 states have call successors, (486) [2022-10-16 13:04:41,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2516 states to 2516 states and 3550 transitions. [2022-10-16 13:04:41,680 INFO L78 Accepts]: Start accepts. Automaton has 2516 states and 3550 transitions. Word has length 111 [2022-10-16 13:04:41,680 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:41,680 INFO L495 AbstractCegarLoop]: Abstraction has 2516 states and 3550 transitions. [2022-10-16 13:04:41,681 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (13), 5 states have call predecessors, (13), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 13:04:41,681 INFO L276 IsEmpty]: Start isEmpty. Operand 2516 states and 3550 transitions. [2022-10-16 13:04:41,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-10-16 13:04:41,685 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:41,686 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:41,686 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-16 13:04:41,686 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:41,686 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:41,687 INFO L85 PathProgramCache]: Analyzing trace with hash -108846374, now seen corresponding path program 1 times [2022-10-16 13:04:41,687 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:41,687 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1293249351] [2022-10-16 13:04:41,687 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:41,687 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:41,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:42,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:42,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:04:42,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:04:42,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:42,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:04:42,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:42,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-10-16 13:04:42,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-10-16 13:04:42,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-10-16 13:04:42,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-10-16 13:04:42,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,219 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-10-16 13:04:42,220 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:42,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1293249351] [2022-10-16 13:04:42,220 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1293249351] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:04:42,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1910268789] [2022-10-16 13:04:42,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:42,221 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:04:42,221 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:04:42,228 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:04:42,256 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 13:04:42,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:42,859 INFO L263 TraceCheckSpWp]: Trace formula consists of 2533 conjuncts, 3 conjunts are in the unsatisfiable core [2022-10-16 13:04:42,874 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:04:43,052 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-10-16 13:04:43,053 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:04:43,185 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-10-16 13:04:43,185 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1910268789] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:04:43,185 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:04:43,186 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 3, 3] total 9 [2022-10-16 13:04:43,186 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887163553] [2022-10-16 13:04:43,186 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:04:43,187 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-10-16 13:04:43,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:43,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-10-16 13:04:43,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:04:43,188 INFO L87 Difference]: Start difference. First operand 2516 states and 3550 transitions. Second operand has 10 states, 9 states have (on average 15.11111111111111) internal successors, (136), 7 states have internal predecessors, (136), 6 states have call successors, (24), 4 states have call predecessors, (24), 1 states have return successors, (17), 6 states have call predecessors, (17), 6 states have call successors, (17) [2022-10-16 13:04:46,889 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:46,889 INFO L93 Difference]: Finished difference Result 4863 states and 7339 transitions. [2022-10-16 13:04:46,890 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-10-16 13:04:46,890 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 15.11111111111111) internal successors, (136), 7 states have internal predecessors, (136), 6 states have call successors, (24), 4 states have call predecessors, (24), 1 states have return successors, (17), 6 states have call predecessors, (17), 6 states have call successors, (17) Word has length 121 [2022-10-16 13:04:46,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:46,927 INFO L225 Difference]: With dead ends: 4863 [2022-10-16 13:04:46,927 INFO L226 Difference]: Without dead ends: 4862 [2022-10-16 13:04:46,930 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 267 GetRequests, 258 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2022-10-16 13:04:46,932 INFO L413 NwaCegarLoop]: 1377 mSDtfsCounter, 3043 mSDsluCounter, 3465 mSDsCounter, 0 mSdLazyCounter, 2180 mSolverCounterSat, 1185 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3267 SdHoareTripleChecker+Valid, 4842 SdHoareTripleChecker+Invalid, 3365 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1185 IncrementalHoareTripleChecker+Valid, 2180 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.3s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:46,932 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3267 Valid, 4842 Invalid, 3365 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1185 Valid, 2180 Invalid, 0 Unknown, 0 Unchecked, 3.3s Time] [2022-10-16 13:04:46,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4862 states. [2022-10-16 13:04:47,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4862 to 2515. [2022-10-16 13:04:47,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2515 states, 1873 states have (on average 1.375333689268553) internal successors, (2576), 1955 states have internal predecessors, (2576), 486 states have call successors, (486), 137 states have call predecessors, (486), 137 states have return successors, (486), 459 states have call predecessors, (486), 486 states have call successors, (486) [2022-10-16 13:04:47,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2515 states to 2515 states and 3548 transitions. [2022-10-16 13:04:47,216 INFO L78 Accepts]: Start accepts. Automaton has 2515 states and 3548 transitions. Word has length 121 [2022-10-16 13:04:47,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:47,217 INFO L495 AbstractCegarLoop]: Abstraction has 2515 states and 3548 transitions. [2022-10-16 13:04:47,217 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 15.11111111111111) internal successors, (136), 7 states have internal predecessors, (136), 6 states have call successors, (24), 4 states have call predecessors, (24), 1 states have return successors, (17), 6 states have call predecessors, (17), 6 states have call successors, (17) [2022-10-16 13:04:47,217 INFO L276 IsEmpty]: Start isEmpty. Operand 2515 states and 3548 transitions. [2022-10-16 13:04:47,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2022-10-16 13:04:47,222 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:47,223 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:47,272 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-16 13:04:47,438 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:04:47,439 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:47,439 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:47,440 INFO L85 PathProgramCache]: Analyzing trace with hash 920731243, now seen corresponding path program 1 times [2022-10-16 13:04:47,440 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:47,441 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [305309045] [2022-10-16 13:04:47,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:47,442 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:47,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:47,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:47,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:47,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:47,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:47,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:04:48,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:04:48,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:48,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:04:48,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:48,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-10-16 13:04:48,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-10-16 13:04:48,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-10-16 13:04:48,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-10-16 13:04:48,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,122 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-10-16 13:04:48,123 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:48,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [305309045] [2022-10-16 13:04:48,123 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [305309045] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:04:48,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1944407521] [2022-10-16 13:04:48,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:48,124 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:04:48,124 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:04:48,126 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:04:48,149 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 13:04:48,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:48,795 INFO L263 TraceCheckSpWp]: Trace formula consists of 2534 conjuncts, 3 conjunts are in the unsatisfiable core [2022-10-16 13:04:48,801 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:04:48,887 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-10-16 13:04:48,887 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:04:48,888 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1944407521] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:48,888 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:04:48,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2022-10-16 13:04:48,890 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [420073454] [2022-10-16 13:04:48,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:48,892 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:04:48,903 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:48,903 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:04:48,904 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:04:48,904 INFO L87 Difference]: Start difference. First operand 2515 states and 3548 transitions. Second operand has 4 states, 3 states have (on average 28.666666666666668) internal successors, (86), 4 states have internal predecessors, (86), 3 states have call successors, (11), 1 states have call predecessors, (11), 1 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-10-16 13:04:49,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:49,162 INFO L93 Difference]: Finished difference Result 3191 states and 4602 transitions. [2022-10-16 13:04:49,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 13:04:49,163 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 28.666666666666668) internal successors, (86), 4 states have internal predecessors, (86), 3 states have call successors, (11), 1 states have call predecessors, (11), 1 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 122 [2022-10-16 13:04:49,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:49,186 INFO L225 Difference]: With dead ends: 3191 [2022-10-16 13:04:49,186 INFO L226 Difference]: Without dead ends: 3190 [2022-10-16 13:04:49,189 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:04:49,190 INFO L413 NwaCegarLoop]: 1627 mSDtfsCounter, 468 mSDsluCounter, 2370 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 550 SdHoareTripleChecker+Valid, 3997 SdHoareTripleChecker+Invalid, 65 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:49,191 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [550 Valid, 3997 Invalid, 65 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-16 13:04:49,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3190 states. [2022-10-16 13:04:49,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3190 to 2402. [2022-10-16 13:04:49,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2402 states, 1785 states have (on average 1.3759103641456583) internal successors, (2456), 1866 states have internal predecessors, (2456), 462 states have call successors, (462), 137 states have call predecessors, (462), 137 states have return successors, (462), 435 states have call predecessors, (462), 462 states have call successors, (462) [2022-10-16 13:04:49,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2402 states to 2402 states and 3380 transitions. [2022-10-16 13:04:49,389 INFO L78 Accepts]: Start accepts. Automaton has 2402 states and 3380 transitions. Word has length 122 [2022-10-16 13:04:49,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:49,389 INFO L495 AbstractCegarLoop]: Abstraction has 2402 states and 3380 transitions. [2022-10-16 13:04:49,390 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 28.666666666666668) internal successors, (86), 4 states have internal predecessors, (86), 3 states have call successors, (11), 1 states have call predecessors, (11), 1 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-10-16 13:04:49,390 INFO L276 IsEmpty]: Start isEmpty. Operand 2402 states and 3380 transitions. [2022-10-16 13:04:49,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2022-10-16 13:04:49,395 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:49,395 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:49,439 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 13:04:49,610 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-10-16 13:04:49,611 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:49,611 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:49,612 INFO L85 PathProgramCache]: Analyzing trace with hash -1038074046, now seen corresponding path program 1 times [2022-10-16 13:04:49,612 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:49,612 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [381121860] [2022-10-16 13:04:49,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:49,613 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:49,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:50,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:50,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:04:50,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:04:50,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:50,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:04:50,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:50,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-10-16 13:04:50,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2022-10-16 13:04:50,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-10-16 13:04:50,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:50,176 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-10-16 13:04:50,177 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:50,177 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [381121860] [2022-10-16 13:04:50,177 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [381121860] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:50,177 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:50,177 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-10-16 13:04:50,178 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [219391523] [2022-10-16 13:04:50,178 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:50,178 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-10-16 13:04:50,178 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:50,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-10-16 13:04:50,179 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:04:50,192 INFO L87 Difference]: Start difference. First operand 2402 states and 3380 transitions. Second operand has 8 states, 8 states have (on average 11.25) internal successors, (90), 5 states have internal predecessors, (90), 3 states have call successors, (14), 5 states have call predecessors, (14), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:04:57,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:04:57,270 INFO L93 Difference]: Finished difference Result 6728 states and 9643 transitions. [2022-10-16 13:04:57,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-16 13:04:57,273 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 5 states have internal predecessors, (90), 3 states have call successors, (14), 5 states have call predecessors, (14), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 134 [2022-10-16 13:04:57,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:04:57,363 INFO L225 Difference]: With dead ends: 6728 [2022-10-16 13:04:57,363 INFO L226 Difference]: Without dead ends: 5149 [2022-10-16 13:04:57,370 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=51, Invalid=159, Unknown=0, NotChecked=0, Total=210 [2022-10-16 13:04:57,371 INFO L413 NwaCegarLoop]: 1889 mSDtfsCounter, 2146 mSDsluCounter, 6001 mSDsCounter, 0 mSdLazyCounter, 4128 mSolverCounterSat, 1155 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2268 SdHoareTripleChecker+Valid, 7890 SdHoareTripleChecker+Invalid, 5283 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1155 IncrementalHoareTripleChecker+Valid, 4128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.5s IncrementalHoareTripleChecker+Time [2022-10-16 13:04:57,372 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2268 Valid, 7890 Invalid, 5283 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1155 Valid, 4128 Invalid, 0 Unknown, 0 Unchecked, 6.5s Time] [2022-10-16 13:04:57,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5149 states. [2022-10-16 13:04:57,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5149 to 2414. [2022-10-16 13:04:57,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2414 states, 1793 states have (on average 1.3742331288343559) internal successors, (2464), 1872 states have internal predecessors, (2464), 466 states have call successors, (466), 137 states have call predecessors, (466), 137 states have return successors, (466), 439 states have call predecessors, (466), 466 states have call successors, (466) [2022-10-16 13:04:57,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2414 states to 2414 states and 3396 transitions. [2022-10-16 13:04:57,632 INFO L78 Accepts]: Start accepts. Automaton has 2414 states and 3396 transitions. Word has length 134 [2022-10-16 13:04:57,632 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:04:57,632 INFO L495 AbstractCegarLoop]: Abstraction has 2414 states and 3396 transitions. [2022-10-16 13:04:57,632 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 5 states have internal predecessors, (90), 3 states have call successors, (14), 5 states have call predecessors, (14), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-10-16 13:04:57,633 INFO L276 IsEmpty]: Start isEmpty. Operand 2414 states and 3396 transitions. [2022-10-16 13:04:57,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2022-10-16 13:04:57,636 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:04:57,636 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:04:57,636 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-16 13:04:57,637 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:04:57,637 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:04:57,637 INFO L85 PathProgramCache]: Analyzing trace with hash 492195112, now seen corresponding path program 1 times [2022-10-16 13:04:57,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:04:57,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [487416196] [2022-10-16 13:04:57,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:04:57,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:04:57,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:57,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:04:57,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:57,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:04:57,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:57,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:04:57,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:04:58,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:58,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:04:58,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:58,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:04:58,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:58,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:04:58,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-10-16 13:04:58,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:58,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:04:58,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2022-10-16 13:04:58,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:04:58,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2022-10-16 13:04:58,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:04:58,161 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2022-10-16 13:04:58,162 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:04:58,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [487416196] [2022-10-16 13:04:58,162 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [487416196] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:04:58,162 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:04:58,162 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-16 13:04:58,163 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1140700618] [2022-10-16 13:04:58,163 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:04:58,163 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-16 13:04:58,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:04:58,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-16 13:04:58,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:04:58,164 INFO L87 Difference]: Start difference. First operand 2414 states and 3396 transitions. Second operand has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (13), 5 states have call predecessors, (13), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:05:01,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:01,336 INFO L93 Difference]: Finished difference Result 5528 states and 7895 transitions. [2022-10-16 13:05:01,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-16 13:05:01,336 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (13), 5 states have call predecessors, (13), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 144 [2022-10-16 13:05:01,337 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:01,353 INFO L225 Difference]: With dead ends: 5528 [2022-10-16 13:05:01,353 INFO L226 Difference]: Without dead ends: 3191 [2022-10-16 13:05:01,361 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:05:01,362 INFO L413 NwaCegarLoop]: 1025 mSDtfsCounter, 1337 mSDsluCounter, 2203 mSDsCounter, 0 mSdLazyCounter, 1542 mSolverCounterSat, 881 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1382 SdHoareTripleChecker+Valid, 3228 SdHoareTripleChecker+Invalid, 2423 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 881 IncrementalHoareTripleChecker+Valid, 1542 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:01,363 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1382 Valid, 3228 Invalid, 2423 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [881 Valid, 1542 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2022-10-16 13:05:01,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3191 states. [2022-10-16 13:05:01,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3191 to 2416. [2022-10-16 13:05:01,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2416 states, 1795 states have (on average 1.373816155988858) internal successors, (2466), 1874 states have internal predecessors, (2466), 466 states have call successors, (466), 137 states have call predecessors, (466), 137 states have return successors, (466), 439 states have call predecessors, (466), 466 states have call successors, (466) [2022-10-16 13:05:01,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2416 states to 2416 states and 3398 transitions. [2022-10-16 13:05:01,620 INFO L78 Accepts]: Start accepts. Automaton has 2416 states and 3398 transitions. Word has length 144 [2022-10-16 13:05:01,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:01,620 INFO L495 AbstractCegarLoop]: Abstraction has 2416 states and 3398 transitions. [2022-10-16 13:05:01,621 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (13), 5 states have call predecessors, (13), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:05:01,621 INFO L276 IsEmpty]: Start isEmpty. Operand 2416 states and 3398 transitions. [2022-10-16 13:05:01,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2022-10-16 13:05:01,624 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:01,625 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:01,625 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-10-16 13:05:01,625 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:05:01,626 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:01,626 INFO L85 PathProgramCache]: Analyzing trace with hash -239772314, now seen corresponding path program 1 times [2022-10-16 13:05:01,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:01,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [528767359] [2022-10-16 13:05:01,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:01,627 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:01,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:02,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:05:02,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:05:02,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:05:02,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:02,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:05:02,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:02,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:05:02,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:02,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:02,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-10-16 13:05:02,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:02,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:02,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2022-10-16 13:05:02,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:02,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2022-10-16 13:05:02,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:02,315 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2022-10-16 13:05:02,315 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:02,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [528767359] [2022-10-16 13:05:02,316 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [528767359] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:02,316 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:05:02,316 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:05:02,316 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1119363223] [2022-10-16 13:05:02,316 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:02,317 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-16 13:05:02,317 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:02,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-16 13:05:02,318 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-10-16 13:05:02,318 INFO L87 Difference]: Start difference. First operand 2416 states and 3398 transitions. Second operand has 7 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (13), 5 states have call predecessors, (13), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:05:07,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:07,892 INFO L93 Difference]: Finished difference Result 6292 states and 9256 transitions. [2022-10-16 13:05:07,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-16 13:05:07,892 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (13), 5 states have call predecessors, (13), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 144 [2022-10-16 13:05:07,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:07,933 INFO L225 Difference]: With dead ends: 6292 [2022-10-16 13:05:07,934 INFO L226 Difference]: Without dead ends: 6286 [2022-10-16 13:05:07,938 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=61, Invalid=121, Unknown=0, NotChecked=0, Total=182 [2022-10-16 13:05:07,939 INFO L413 NwaCegarLoop]: 1413 mSDtfsCounter, 3722 mSDsluCounter, 2074 mSDsCounter, 0 mSdLazyCounter, 1935 mSolverCounterSat, 2267 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3832 SdHoareTripleChecker+Valid, 3487 SdHoareTripleChecker+Invalid, 4202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2267 IncrementalHoareTripleChecker+Valid, 1935 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.7s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:07,939 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3832 Valid, 3487 Invalid, 4202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2267 Valid, 1935 Invalid, 0 Unknown, 0 Unchecked, 4.7s Time] [2022-10-16 13:05:07,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6286 states. [2022-10-16 13:05:08,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6286 to 5837. [2022-10-16 13:05:08,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5837 states, 4338 states have (on average 1.3457814661134164) internal successors, (5838), 4481 states have internal predecessors, (5838), 1057 states have call successors, (1057), 268 states have call predecessors, (1057), 424 states have return successors, (1671), 1144 states have call predecessors, (1671), 1057 states have call successors, (1671) [2022-10-16 13:05:08,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5837 states to 5837 states and 8566 transitions. [2022-10-16 13:05:08,531 INFO L78 Accepts]: Start accepts. Automaton has 5837 states and 8566 transitions. Word has length 144 [2022-10-16 13:05:08,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:08,532 INFO L495 AbstractCegarLoop]: Abstraction has 5837 states and 8566 transitions. [2022-10-16 13:05:08,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 13.333333333333334) internal successors, (80), 3 states have internal predecessors, (80), 2 states have call successors, (13), 5 states have call predecessors, (13), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:05:08,532 INFO L276 IsEmpty]: Start isEmpty. Operand 5837 states and 8566 transitions. [2022-10-16 13:05:08,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2022-10-16 13:05:08,536 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:08,536 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:08,536 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-10-16 13:05:08,536 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:05:08,537 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:08,537 INFO L85 PathProgramCache]: Analyzing trace with hash 1173025777, now seen corresponding path program 1 times [2022-10-16 13:05:08,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:08,537 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [837232501] [2022-10-16 13:05:08,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:08,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:08,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:09,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:09,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:09,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:05:09,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:09,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:05:09,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:09,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:05:09,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:09,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:09,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:09,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:05:09,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:09,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:09,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-10-16 13:05:10,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:10,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:10,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-10-16 13:05:10,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:10,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:10,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2022-10-16 13:05:10,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:10,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2022-10-16 13:05:10,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,109 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-10-16 13:05:10,109 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:10,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [837232501] [2022-10-16 13:05:10,110 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [837232501] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:05:10,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [374657090] [2022-10-16 13:05:10,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:10,110 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:10,111 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:05:10,112 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:05:10,136 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-10-16 13:05:10,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:10,852 INFO L263 TraceCheckSpWp]: Trace formula consists of 3025 conjuncts, 11 conjunts are in the unsatisfiable core [2022-10-16 13:05:10,870 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:05:10,914 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2022-10-16 13:05:10,914 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:05:10,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [374657090] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:10,915 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:05:10,915 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 10 [2022-10-16 13:05:10,915 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1801255875] [2022-10-16 13:05:10,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:10,916 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-16 13:05:10,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:10,916 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-16 13:05:10,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:05:10,917 INFO L87 Difference]: Start difference. First operand 5837 states and 8566 transitions. Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-10-16 13:05:11,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:11,509 INFO L93 Difference]: Finished difference Result 11657 states and 17116 transitions. [2022-10-16 13:05:11,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-16 13:05:11,510 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 151 [2022-10-16 13:05:11,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:11,543 INFO L225 Difference]: With dead ends: 11657 [2022-10-16 13:05:11,543 INFO L226 Difference]: Without dead ends: 5897 [2022-10-16 13:05:11,569 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 181 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-10-16 13:05:11,570 INFO L413 NwaCegarLoop]: 1254 mSDtfsCounter, 266 mSDsluCounter, 939 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 314 SdHoareTripleChecker+Valid, 2193 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:11,570 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [314 Valid, 2193 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:05:11,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5897 states. [2022-10-16 13:05:12,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5897 to 5837. [2022-10-16 13:05:12,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5837 states, 4338 states have (on average 1.3448593822037807) internal successors, (5834), 4477 states have internal predecessors, (5834), 1057 states have call successors, (1057), 268 states have call predecessors, (1057), 424 states have return successors, (1671), 1144 states have call predecessors, (1671), 1057 states have call successors, (1671) [2022-10-16 13:05:12,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5837 states to 5837 states and 8562 transitions. [2022-10-16 13:05:12,266 INFO L78 Accepts]: Start accepts. Automaton has 5837 states and 8562 transitions. Word has length 151 [2022-10-16 13:05:12,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:12,267 INFO L495 AbstractCegarLoop]: Abstraction has 5837 states and 8562 transitions. [2022-10-16 13:05:12,267 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-10-16 13:05:12,267 INFO L276 IsEmpty]: Start isEmpty. Operand 5837 states and 8562 transitions. [2022-10-16 13:05:12,271 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-10-16 13:05:12,271 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:12,271 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:12,318 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-10-16 13:05:12,486 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:12,486 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:05:12,487 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:12,487 INFO L85 PathProgramCache]: Analyzing trace with hash 1376684811, now seen corresponding path program 1 times [2022-10-16 13:05:12,487 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:12,487 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492543234] [2022-10-16 13:05:12,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:12,487 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:12,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:13,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:13,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:13,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:05:13,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:13,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:05:13,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:13,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:05:13,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:13,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:13,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:13,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:05:13,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:13,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:13,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:13,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-10-16 13:05:13,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-10-16 13:05:14,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:14,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:14,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 105 [2022-10-16 13:05:14,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:14,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:14,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-10-16 13:05:14,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:14,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2022-10-16 13:05:14,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,129 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-10-16 13:05:14,130 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:14,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492543234] [2022-10-16 13:05:14,130 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492543234] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:05:14,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1792322156] [2022-10-16 13:05:14,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:14,131 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:14,131 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:05:14,132 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:05:14,156 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-10-16 13:05:14,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:14,961 INFO L263 TraceCheckSpWp]: Trace formula consists of 3113 conjuncts, 64 conjunts are in the unsatisfiable core [2022-10-16 13:05:14,977 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:05:15,246 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-10-16 13:05:15,246 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:05:15,247 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1792322156] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:15,247 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:05:15,247 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [10] total 20 [2022-10-16 13:05:15,250 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [773374943] [2022-10-16 13:05:15,251 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:15,251 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-10-16 13:05:15,251 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:15,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-10-16 13:05:15,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=339, Unknown=0, NotChecked=0, Total=380 [2022-10-16 13:05:15,253 INFO L87 Difference]: Start difference. First operand 5837 states and 8562 transitions. Second operand has 12 states, 12 states have (on average 8.333333333333334) internal successors, (100), 9 states have internal predecessors, (100), 2 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:05:17,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:17,073 INFO L93 Difference]: Finished difference Result 17903 states and 26268 transitions. [2022-10-16 13:05:17,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-10-16 13:05:17,073 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 8.333333333333334) internal successors, (100), 9 states have internal predecessors, (100), 2 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) Word has length 156 [2022-10-16 13:05:17,074 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:17,130 INFO L225 Difference]: With dead ends: 17903 [2022-10-16 13:05:17,130 INFO L226 Difference]: Without dead ends: 12143 [2022-10-16 13:05:17,155 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 212 GetRequests, 181 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 152 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=109, Invalid=947, Unknown=0, NotChecked=0, Total=1056 [2022-10-16 13:05:17,156 INFO L413 NwaCegarLoop]: 1425 mSDtfsCounter, 1450 mSDsluCounter, 13830 mSDsCounter, 0 mSdLazyCounter, 210 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1460 SdHoareTripleChecker+Valid, 15255 SdHoareTripleChecker+Invalid, 242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 210 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:17,157 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1460 Valid, 15255 Invalid, 242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 210 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-10-16 13:05:17,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12143 states. [2022-10-16 13:05:18,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12143 to 5865. [2022-10-16 13:05:18,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5865 states, 4362 states have (on average 1.3429619440623568) internal successors, (5858), 4497 states have internal predecessors, (5858), 1057 states have call successors, (1057), 268 states have call predecessors, (1057), 428 states have return successors, (1679), 1152 states have call predecessors, (1679), 1057 states have call successors, (1679) [2022-10-16 13:05:18,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5865 states to 5865 states and 8594 transitions. [2022-10-16 13:05:18,139 INFO L78 Accepts]: Start accepts. Automaton has 5865 states and 8594 transitions. Word has length 156 [2022-10-16 13:05:18,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:18,140 INFO L495 AbstractCegarLoop]: Abstraction has 5865 states and 8594 transitions. [2022-10-16 13:05:18,140 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 8.333333333333334) internal successors, (100), 9 states have internal predecessors, (100), 2 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (15), 5 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:05:18,140 INFO L276 IsEmpty]: Start isEmpty. Operand 5865 states and 8594 transitions. [2022-10-16 13:05:18,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 163 [2022-10-16 13:05:18,144 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:18,144 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:18,191 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-10-16 13:05:18,360 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:18,360 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:05:18,361 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:18,361 INFO L85 PathProgramCache]: Analyzing trace with hash 477330666, now seen corresponding path program 1 times [2022-10-16 13:05:18,361 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:18,361 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1168284636] [2022-10-16 13:05:18,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:18,362 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:18,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:19,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:05:19,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:05:19,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:05:19,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:19,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:05:19,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:19,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:19,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-10-16 13:05:19,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2022-10-16 13:05:19,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:19,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:19,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-10-16 13:05:19,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:19,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:19,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 131 [2022-10-16 13:05:19,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:19,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-10-16 13:05:19,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:19,631 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-10-16 13:05:19,631 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:19,631 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1168284636] [2022-10-16 13:05:19,631 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1168284636] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:05:19,631 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2012753104] [2022-10-16 13:05:19,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:19,632 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:19,632 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:05:19,635 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:05:19,653 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-10-16 13:05:20,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:20,330 INFO L263 TraceCheckSpWp]: Trace formula consists of 3139 conjuncts, 28 conjunts are in the unsatisfiable core [2022-10-16 13:05:20,337 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:05:20,407 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-10-16 13:05:20,408 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:05:20,408 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2012753104] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:20,408 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:05:20,408 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2022-10-16 13:05:20,409 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1956918678] [2022-10-16 13:05:20,409 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:20,410 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:05:20,410 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:20,410 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:05:20,411 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2022-10-16 13:05:20,411 INFO L87 Difference]: Start difference. First operand 5865 states and 8594 transitions. Second operand has 5 states, 5 states have (on average 19.0) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:05:21,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:21,004 INFO L93 Difference]: Finished difference Result 11673 states and 17458 transitions. [2022-10-16 13:05:21,005 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:05:21,005 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 19.0) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 162 [2022-10-16 13:05:21,005 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:21,038 INFO L225 Difference]: With dead ends: 11673 [2022-10-16 13:05:21,038 INFO L226 Difference]: Without dead ends: 5865 [2022-10-16 13:05:21,071 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 193 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2022-10-16 13:05:21,072 INFO L413 NwaCegarLoop]: 1163 mSDtfsCounter, 0 mSDsluCounter, 3475 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 4638 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:21,073 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 4638 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:05:21,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5865 states. [2022-10-16 13:05:21,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5865 to 5865. [2022-10-16 13:05:21,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5865 states, 4362 states have (on average 1.342503438789546) internal successors, (5856), 4497 states have internal predecessors, (5856), 1057 states have call successors, (1057), 268 states have call predecessors, (1057), 428 states have return successors, (1673), 1152 states have call predecessors, (1673), 1057 states have call successors, (1673) [2022-10-16 13:05:21,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5865 states to 5865 states and 8586 transitions. [2022-10-16 13:05:21,797 INFO L78 Accepts]: Start accepts. Automaton has 5865 states and 8586 transitions. Word has length 162 [2022-10-16 13:05:21,798 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:21,798 INFO L495 AbstractCegarLoop]: Abstraction has 5865 states and 8586 transitions. [2022-10-16 13:05:21,798 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.0) internal successors, (95), 4 states have internal predecessors, (95), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:05:21,798 INFO L276 IsEmpty]: Start isEmpty. Operand 5865 states and 8586 transitions. [2022-10-16 13:05:21,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 175 [2022-10-16 13:05:21,802 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:21,802 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:21,847 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-10-16 13:05:22,015 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-10-16 13:05:22,017 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:05:22,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:22,017 INFO L85 PathProgramCache]: Analyzing trace with hash -293299766, now seen corresponding path program 2 times [2022-10-16 13:05:22,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:22,019 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1225922131] [2022-10-16 13:05:22,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:22,019 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:22,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:23,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:05:23,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:05:23,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:05:23,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:23,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:23,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:05:23,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:23,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:23,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-16 13:05:23,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:23,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-10-16 13:05:23,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:24,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:24,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2022-10-16 13:05:24,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:24,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:24,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 137 [2022-10-16 13:05:24,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:24,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:24,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2022-10-16 13:05:24,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:24,147 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2022-10-16 13:05:24,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:24,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1225922131] [2022-10-16 13:05:24,148 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1225922131] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:05:24,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [836361188] [2022-10-16 13:05:24,148 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-10-16 13:05:24,149 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:24,149 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:05:24,150 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:05:24,162 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-10-16 13:05:24,981 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-10-16 13:05:24,981 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-10-16 13:05:24,996 INFO L263 TraceCheckSpWp]: Trace formula consists of 3191 conjuncts, 52 conjunts are in the unsatisfiable core [2022-10-16 13:05:25,008 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:05:25,505 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 52 proven. 16 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2022-10-16 13:05:25,505 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:05:26,102 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 101 trivial. 0 not checked. [2022-10-16 13:05:26,103 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [836361188] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:05:26,103 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:05:26,103 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 9, 9] total 25 [2022-10-16 13:05:26,103 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1801044078] [2022-10-16 13:05:26,103 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:05:26,105 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-10-16 13:05:26,105 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:26,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-10-16 13:05:26,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=530, Unknown=0, NotChecked=0, Total=600 [2022-10-16 13:05:26,106 INFO L87 Difference]: Start difference. First operand 5865 states and 8586 transitions. Second operand has 25 states, 25 states have (on average 8.32) internal successors, (208), 17 states have internal predecessors, (208), 6 states have call successors, (50), 10 states have call predecessors, (50), 8 states have return successors, (42), 9 states have call predecessors, (42), 6 states have call successors, (42) [2022-10-16 13:05:45,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:45,281 INFO L93 Difference]: Finished difference Result 20038 states and 30602 transitions. [2022-10-16 13:05:45,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-10-16 13:05:45,282 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.32) internal successors, (208), 17 states have internal predecessors, (208), 6 states have call successors, (50), 10 states have call predecessors, (50), 8 states have return successors, (42), 9 states have call predecessors, (42), 6 states have call successors, (42) Word has length 174 [2022-10-16 13:05:45,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:45,364 INFO L225 Difference]: With dead ends: 20038 [2022-10-16 13:05:45,365 INFO L226 Difference]: Without dead ends: 14250 [2022-10-16 13:05:45,395 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 417 GetRequests, 376 SyntacticMatches, 0 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=278, Invalid=1528, Unknown=0, NotChecked=0, Total=1806 [2022-10-16 13:05:45,396 INFO L413 NwaCegarLoop]: 1950 mSDtfsCounter, 4511 mSDsluCounter, 23150 mSDsCounter, 0 mSdLazyCounter, 14321 mSolverCounterSat, 2763 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4629 SdHoareTripleChecker+Valid, 25100 SdHoareTripleChecker+Invalid, 17084 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.2s SdHoareTripleChecker+Time, 2763 IncrementalHoareTripleChecker+Valid, 14321 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:45,396 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4629 Valid, 25100 Invalid, 17084 Unknown, 0 Unchecked, 0.2s Time], IncrementalHoareTripleChecker [2763 Valid, 14321 Invalid, 0 Unknown, 0 Unchecked, 16.1s Time] [2022-10-16 13:05:45,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14250 states. [2022-10-16 13:05:47,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14250 to 12129. [2022-10-16 13:05:47,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12129 states, 9010 states have (on average 1.334739178690344) internal successors, (12026), 9245 states have internal predecessors, (12026), 2159 states have call successors, (2159), 526 states have call predecessors, (2159), 942 states have return successors, (3789), 2462 states have call predecessors, (3789), 2159 states have call successors, (3789) [2022-10-16 13:05:47,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12129 states to 12129 states and 17974 transitions. [2022-10-16 13:05:47,332 INFO L78 Accepts]: Start accepts. Automaton has 12129 states and 17974 transitions. Word has length 174 [2022-10-16 13:05:47,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:47,333 INFO L495 AbstractCegarLoop]: Abstraction has 12129 states and 17974 transitions. [2022-10-16 13:05:47,333 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 8.32) internal successors, (208), 17 states have internal predecessors, (208), 6 states have call successors, (50), 10 states have call predecessors, (50), 8 states have return successors, (42), 9 states have call predecessors, (42), 6 states have call successors, (42) [2022-10-16 13:05:47,333 INFO L276 IsEmpty]: Start isEmpty. Operand 12129 states and 17974 transitions. [2022-10-16 13:05:47,337 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2022-10-16 13:05:47,337 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:47,338 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:47,385 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-10-16 13:05:47,552 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-10-16 13:05:47,553 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:05:47,554 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:47,554 INFO L85 PathProgramCache]: Analyzing trace with hash 1939778726, now seen corresponding path program 1 times [2022-10-16 13:05:47,554 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:47,554 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [733332450] [2022-10-16 13:05:47,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:47,555 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:47,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:48,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:05:48,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:05:48,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:05:48,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:48,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:48,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:05:48,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:48,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:48,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-16 13:05:48,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-10-16 13:05:48,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:48,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:48,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-10-16 13:05:48,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:48,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:48,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2022-10-16 13:05:48,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:48,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2022-10-16 13:05:48,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:48,876 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 4 proven. 13 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2022-10-16 13:05:48,877 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:48,877 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [733332450] [2022-10-16 13:05:48,877 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [733332450] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:05:48,877 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1420249975] [2022-10-16 13:05:48,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:48,878 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:48,878 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:05:48,879 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:05:48,898 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-10-16 13:05:49,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:49,608 INFO L263 TraceCheckSpWp]: Trace formula consists of 3169 conjuncts, 48 conjunts are in the unsatisfiable core [2022-10-16 13:05:49,616 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:05:49,774 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-10-16 13:05:49,774 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:05:49,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1420249975] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:49,775 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:05:49,775 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [10] total 17 [2022-10-16 13:05:49,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [829299120] [2022-10-16 13:05:49,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:49,778 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-10-16 13:05:49,778 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:49,779 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-10-16 13:05:49,779 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=237, Unknown=0, NotChecked=0, Total=272 [2022-10-16 13:05:49,781 INFO L87 Difference]: Start difference. First operand 12129 states and 17974 transitions. Second operand has 9 states, 9 states have (on average 11.333333333333334) internal successors, (102), 7 states have internal predecessors, (102), 2 states have call successors, (18), 2 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) [2022-10-16 13:05:51,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:51,515 INFO L93 Difference]: Finished difference Result 24252 states and 35948 transitions. [2022-10-16 13:05:51,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 13:05:51,515 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.333333333333334) internal successors, (102), 7 states have internal predecessors, (102), 2 states have call successors, (18), 2 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) Word has length 169 [2022-10-16 13:05:51,516 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:51,567 INFO L225 Difference]: With dead ends: 24252 [2022-10-16 13:05:51,567 INFO L226 Difference]: Without dead ends: 12200 [2022-10-16 13:05:51,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 215 GetRequests, 197 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=333, Unknown=0, NotChecked=0, Total=380 [2022-10-16 13:05:51,606 INFO L413 NwaCegarLoop]: 1250 mSDtfsCounter, 268 mSDsluCounter, 8418 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 319 SdHoareTripleChecker+Valid, 9668 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:51,607 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [319 Valid, 9668 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:05:51,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12200 states. [2022-10-16 13:05:53,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12200 to 12137. [2022-10-16 13:05:53,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12137 states, 9018 states have (on average 1.3344422266577955) internal successors, (12034), 9249 states have internal predecessors, (12034), 2159 states have call successors, (2159), 526 states have call predecessors, (2159), 942 states have return successors, (3789), 2466 states have call predecessors, (3789), 2159 states have call successors, (3789) [2022-10-16 13:05:53,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12137 states to 12137 states and 17982 transitions. [2022-10-16 13:05:53,461 INFO L78 Accepts]: Start accepts. Automaton has 12137 states and 17982 transitions. Word has length 169 [2022-10-16 13:05:53,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:05:53,462 INFO L495 AbstractCegarLoop]: Abstraction has 12137 states and 17982 transitions. [2022-10-16 13:05:53,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.333333333333334) internal successors, (102), 7 states have internal predecessors, (102), 2 states have call successors, (18), 2 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 2 states have call successors, (16) [2022-10-16 13:05:53,462 INFO L276 IsEmpty]: Start isEmpty. Operand 12137 states and 17982 transitions. [2022-10-16 13:05:53,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 176 [2022-10-16 13:05:53,466 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:05:53,467 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:05:53,511 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-10-16 13:05:53,682 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:53,683 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:05:53,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:05:53,684 INFO L85 PathProgramCache]: Analyzing trace with hash 1486195879, now seen corresponding path program 2 times [2022-10-16 13:05:53,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:05:53,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1948701049] [2022-10-16 13:05:53,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:05:53,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:05:53,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:54,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:05:54,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:05:54,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-10-16 13:05:54,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:54,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:54,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-10-16 13:05:54,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:54,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:54,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-10-16 13:05:54,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-10-16 13:05:54,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:54,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:54,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-10-16 13:05:54,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:54,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:05:54,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2022-10-16 13:05:54,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:05:54,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:05:54,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2022-10-16 13:05:54,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:05:54,999 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 4 proven. 13 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2022-10-16 13:05:55,000 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:05:55,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1948701049] [2022-10-16 13:05:55,000 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1948701049] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:05:55,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1672374946] [2022-10-16 13:05:55,001 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-10-16 13:05:55,002 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:05:55,002 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:05:55,005 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:05:55,011 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-10-16 13:05:56,362 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-10-16 13:05:56,362 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-10-16 13:05:56,376 INFO L263 TraceCheckSpWp]: Trace formula consists of 3195 conjuncts, 14 conjunts are in the unsatisfiable core [2022-10-16 13:05:56,381 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:05:56,420 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 99 trivial. 0 not checked. [2022-10-16 13:05:56,421 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:05:56,421 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1672374946] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:05:56,421 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:05:56,421 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [10] total 12 [2022-10-16 13:05:56,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [814191293] [2022-10-16 13:05:56,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:05:56,425 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:05:56,425 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:05:56,426 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:05:56,426 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2022-10-16 13:05:56,426 INFO L87 Difference]: Start difference. First operand 12137 states and 17982 transitions. Second operand has 4 states, 4 states have (on average 24.25) internal successors, (97), 4 states have internal predecessors, (97), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:05:58,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:05:58,246 INFO L93 Difference]: Finished difference Result 24256 states and 35945 transitions. [2022-10-16 13:05:58,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 13:05:58,247 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 24.25) internal successors, (97), 4 states have internal predecessors, (97), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 175 [2022-10-16 13:05:58,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:05:58,298 INFO L225 Difference]: With dead ends: 24256 [2022-10-16 13:05:58,298 INFO L226 Difference]: Without dead ends: 12138 [2022-10-16 13:05:58,343 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 210 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2022-10-16 13:05:58,344 INFO L413 NwaCegarLoop]: 1162 mSDtfsCounter, 2 mSDsluCounter, 2322 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3484 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:05:58,344 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 3484 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:05:58,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12138 states. [2022-10-16 13:05:59,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12138 to 12138. [2022-10-16 13:05:59,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12138 states, 9019 states have (on average 1.3344051446945338) internal successors, (12035), 9250 states have internal predecessors, (12035), 2159 states have call successors, (2159), 526 states have call predecessors, (2159), 942 states have return successors, (3789), 2466 states have call predecessors, (3789), 2159 states have call successors, (3789) [2022-10-16 13:06:00,036 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12138 states to 12138 states and 17983 transitions. [2022-10-16 13:06:00,038 INFO L78 Accepts]: Start accepts. Automaton has 12138 states and 17983 transitions. Word has length 175 [2022-10-16 13:06:00,039 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:06:00,039 INFO L495 AbstractCegarLoop]: Abstraction has 12138 states and 17983 transitions. [2022-10-16 13:06:00,039 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 24.25) internal successors, (97), 4 states have internal predecessors, (97), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-10-16 13:06:00,039 INFO L276 IsEmpty]: Start isEmpty. Operand 12138 states and 17983 transitions. [2022-10-16 13:06:00,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 177 [2022-10-16 13:06:00,043 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:06:00,044 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:06:00,090 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-10-16 13:06:00,257 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-10-16 13:06:00,258 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:06:00,258 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:06:00,259 INFO L85 PathProgramCache]: Analyzing trace with hash 862031011, now seen corresponding path program 1 times [2022-10-16 13:06:00,259 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:06:00,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1137132044] [2022-10-16 13:06:00,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:00,260 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:06:00,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:01,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:06:01,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:06:01,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:06:01,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:01,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:01,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:06:01,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:01,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:01,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-10-16 13:06:01,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:06:01,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:01,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:06:01,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-10-16 13:06:01,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:01,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:06:01,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 139 [2022-10-16 13:06:01,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:01,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:01,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-10-16 13:06:01,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:01,397 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 4 proven. 13 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2022-10-16 13:06:01,398 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:06:01,398 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1137132044] [2022-10-16 13:06:01,398 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1137132044] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:06:01,398 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [561576441] [2022-10-16 13:06:01,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:01,398 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:06:01,399 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:06:01,399 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:06:01,427 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-10-16 13:06:02,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:02,321 INFO L263 TraceCheckSpWp]: Trace formula consists of 3210 conjuncts, 28 conjunts are in the unsatisfiable core [2022-10-16 13:06:02,328 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:06:02,434 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 67 proven. 0 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2022-10-16 13:06:02,435 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:06:02,435 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [561576441] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:06:02,435 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:06:02,435 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-10-16 13:06:02,436 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1675812735] [2022-10-16 13:06:02,436 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:06:02,437 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:06:02,437 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:06:02,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:06:02,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-10-16 13:06:02,438 INFO L87 Difference]: Start difference. First operand 12138 states and 17983 transitions. Second operand has 6 states, 6 states have (on average 18.833333333333332) internal successors, (113), 5 states have internal predecessors, (113), 3 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (19), 4 states have call predecessors, (19), 3 states have call successors, (19) [2022-10-16 13:06:03,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:06:03,974 INFO L93 Difference]: Finished difference Result 24325 states and 36057 transitions. [2022-10-16 13:06:03,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:06:03,975 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 18.833333333333332) internal successors, (113), 5 states have internal predecessors, (113), 3 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (19), 4 states have call predecessors, (19), 3 states have call successors, (19) Word has length 176 [2022-10-16 13:06:03,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:06:04,013 INFO L225 Difference]: With dead ends: 24325 [2022-10-16 13:06:04,014 INFO L226 Difference]: Without dead ends: 12265 [2022-10-16 13:06:04,050 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 209 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-10-16 13:06:04,050 INFO L413 NwaCegarLoop]: 1253 mSDtfsCounter, 270 mSDsluCounter, 4685 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 5938 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:06:04,051 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 5938 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 13:06:04,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12265 states. [2022-10-16 13:06:05,780 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12265 to 12178. [2022-10-16 13:06:05,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12178 states, 9051 states have (on average 1.334106728538283) internal successors, (12075), 9274 states have internal predecessors, (12075), 2167 states have call successors, (2167), 526 states have call predecessors, (2167), 942 states have return successors, (3797), 2482 states have call predecessors, (3797), 2167 states have call successors, (3797) [2022-10-16 13:06:05,830 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12178 states to 12178 states and 18039 transitions. [2022-10-16 13:06:05,833 INFO L78 Accepts]: Start accepts. Automaton has 12178 states and 18039 transitions. Word has length 176 [2022-10-16 13:06:05,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:06:05,834 INFO L495 AbstractCegarLoop]: Abstraction has 12178 states and 18039 transitions. [2022-10-16 13:06:05,835 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 18.833333333333332) internal successors, (113), 5 states have internal predecessors, (113), 3 states have call successors, (22), 2 states have call predecessors, (22), 3 states have return successors, (19), 4 states have call predecessors, (19), 3 states have call successors, (19) [2022-10-16 13:06:05,835 INFO L276 IsEmpty]: Start isEmpty. Operand 12178 states and 18039 transitions. [2022-10-16 13:06:05,838 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2022-10-16 13:06:05,839 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:06:05,839 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:06:05,874 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-10-16 13:06:06,054 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-10-16 13:06:06,055 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:06:06,055 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:06:06,056 INFO L85 PathProgramCache]: Analyzing trace with hash -573436350, now seen corresponding path program 2 times [2022-10-16 13:06:06,056 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:06:06,056 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1078087926] [2022-10-16 13:06:06,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:06,057 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:06:06,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:07,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-10-16 13:06:07,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:06:07,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-16 13:06:07,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:07,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:07,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-10-16 13:06:07,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:07,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:07,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-10-16 13:06:07,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-10-16 13:06:07,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:07,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:07,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-10-16 13:06:07,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-10-16 13:06:07,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:07,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-10-16 13:06:07,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 145 [2022-10-16 13:06:07,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:06:07,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 13:06:07,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-10-16 13:06:07,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:06:07,686 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2022-10-16 13:06:07,687 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:06:07,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1078087926] [2022-10-16 13:06:07,687 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1078087926] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:06:07,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2120386010] [2022-10-16 13:06:07,688 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-10-16 13:06:07,688 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:06:07,688 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:06:07,689 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:06:07,712 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-10-16 13:06:09,416 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-10-16 13:06:09,416 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-10-16 13:06:09,428 INFO L263 TraceCheckSpWp]: Trace formula consists of 3236 conjuncts, 7 conjunts are in the unsatisfiable core [2022-10-16 13:06:09,437 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:06:09,506 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 117 trivial. 0 not checked. [2022-10-16 13:06:09,506 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:06:09,680 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 121 trivial. 0 not checked. [2022-10-16 13:06:09,681 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2120386010] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:06:09,681 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:06:09,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 5, 5] total 15 [2022-10-16 13:06:09,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1424307181] [2022-10-16 13:06:09,681 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:06:09,683 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-10-16 13:06:09,683 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:06:09,684 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-10-16 13:06:09,684 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=166, Unknown=0, NotChecked=0, Total=210 [2022-10-16 13:06:09,684 INFO L87 Difference]: Start difference. First operand 12178 states and 18039 transitions. Second operand has 15 states, 15 states have (on average 9.533333333333333) internal successors, (143), 10 states have internal predecessors, (143), 2 states have call successors, (44), 7 states have call predecessors, (44), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2022-10-16 13:06:15,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:06:15,328 INFO L93 Difference]: Finished difference Result 24907 states and 36996 transitions. [2022-10-16 13:06:15,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-16 13:06:15,329 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.533333333333333) internal successors, (143), 10 states have internal predecessors, (143), 2 states have call successors, (44), 7 states have call predecessors, (44), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 182 [2022-10-16 13:06:15,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:06:15,369 INFO L225 Difference]: With dead ends: 24907 [2022-10-16 13:06:15,369 INFO L226 Difference]: Without dead ends: 12747 [2022-10-16 13:06:15,395 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 417 GetRequests, 395 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=118, Invalid=388, Unknown=0, NotChecked=0, Total=506 [2022-10-16 13:06:15,396 INFO L413 NwaCegarLoop]: 1010 mSDtfsCounter, 2105 mSDsluCounter, 2617 mSDsCounter, 0 mSdLazyCounter, 1712 mSolverCounterSat, 1428 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2150 SdHoareTripleChecker+Valid, 3627 SdHoareTripleChecker+Invalid, 3140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1428 IncrementalHoareTripleChecker+Valid, 1712 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.6s IncrementalHoareTripleChecker+Time [2022-10-16 13:06:15,396 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2150 Valid, 3627 Invalid, 3140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1428 Valid, 1712 Invalid, 0 Unknown, 0 Unchecked, 3.6s Time] [2022-10-16 13:06:15,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12747 states. [2022-10-16 13:06:17,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12747 to 12181. [2022-10-16 13:06:17,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12181 states, 9054 states have (on average 1.333996023856859) internal successors, (12078), 9277 states have internal predecessors, (12078), 2167 states have call successors, (2167), 526 states have call predecessors, (2167), 942 states have return successors, (3797), 2482 states have call predecessors, (3797), 2167 states have call successors, (3797) [2022-10-16 13:06:17,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12181 states to 12181 states and 18042 transitions. [2022-10-16 13:06:17,134 INFO L78 Accepts]: Start accepts. Automaton has 12181 states and 18042 transitions. Word has length 182 [2022-10-16 13:06:17,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:06:17,135 INFO L495 AbstractCegarLoop]: Abstraction has 12181 states and 18042 transitions. [2022-10-16 13:06:17,135 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.533333333333333) internal successors, (143), 10 states have internal predecessors, (143), 2 states have call successors, (44), 7 states have call predecessors, (44), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2022-10-16 13:06:17,135 INFO L276 IsEmpty]: Start isEmpty. Operand 12181 states and 18042 transitions. [2022-10-16 13:06:17,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 186 [2022-10-16 13:06:17,139 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:06:17,139 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:06:17,180 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-10-16 13:06:17,355 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:06:17,356 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 18 more)] === [2022-10-16 13:06:17,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:06:17,356 INFO L85 PathProgramCache]: Analyzing trace with hash -1656104378, now seen corresponding path program 3 times [2022-10-16 13:06:17,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:06:17,357 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [460430715] [2022-10-16 13:06:17,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:06:17,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:06:18,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:06:18,184 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:06:18,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:06:18,992 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:06:18,992 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:06:18,994 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 20 remaining) [2022-10-16 13:06:18,996 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_usb_fill_bulk_urb_12Err0ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 20 remaining) [2022-10-16 13:06:18,997 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_usb_fill_bulk_urb_12Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 20 remaining) [2022-10-16 13:06:18,997 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 20 remaining) [2022-10-16 13:06:18,997 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location if_usb_receiveErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 20 remaining) [2022-10-16 13:06:18,997 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location if_usb_receiveErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 20 remaining) [2022-10-16 13:06:18,998 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location if_usb_disconnectErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 20 remaining) [2022-10-16 13:06:18,998 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location if_usb_disconnectErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 20 remaining) [2022-10-16 13:06:19,000 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 20 remaining) [2022-10-16 13:06:19,000 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 20 remaining) [2022-10-16 13:06:19,000 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 20 remaining) [2022-10-16 13:06:19,000 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 20 remaining) [2022-10-16 13:06:19,001 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 20 remaining) [2022-10-16 13:06:19,001 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 20 remaining) [2022-10-16 13:06:19,001 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 20 remaining) [2022-10-16 13:06:19,001 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 20 remaining) [2022-10-16 13:06:19,001 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 20 remaining) [2022-10-16 13:06:19,002 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 20 remaining) [2022-10-16 13:06:19,002 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 20 remaining) [2022-10-16 13:06:19,002 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 20 remaining) [2022-10-16 13:06:19,002 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-10-16 13:06:19,007 INFO L444 BasicCegarLoop]: Path program histogram: [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:06:19,015 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:06:19,202 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-10-16 13:06:19,571 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:06:19 BoogieIcfgContainer [2022-10-16 13:06:19,571 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:06:19,572 INFO L158 Benchmark]: Toolchain (without parser) took 130568.19ms. Allocated memory was 155.2MB in the beginning and 2.8GB in the end (delta: 2.6GB). Free memory was 119.1MB in the beginning and 2.3GB in the end (delta: -2.2GB). Peak memory consumption was 952.0MB. Max. memory is 8.0GB. [2022-10-16 13:06:19,572 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 155.2MB. Free memory is still 125.2MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:06:19,573 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2677.98ms. Allocated memory was 155.2MB in the beginning and 203.4MB in the end (delta: 48.2MB). Free memory was 118.8MB in the beginning and 149.4MB in the end (delta: -30.6MB). Peak memory consumption was 100.6MB. Max. memory is 8.0GB. [2022-10-16 13:06:19,573 INFO L158 Benchmark]: Boogie Procedure Inliner took 245.98ms. Allocated memory is still 203.4MB. Free memory was 149.4MB in the beginning and 133.7MB in the end (delta: 15.7MB). Peak memory consumption was 15.7MB. Max. memory is 8.0GB. [2022-10-16 13:06:19,574 INFO L158 Benchmark]: Boogie Preprocessor took 272.12ms. Allocated memory is still 203.4MB. Free memory was 133.7MB in the beginning and 116.3MB in the end (delta: 17.4MB). Peak memory consumption was 17.8MB. Max. memory is 8.0GB. [2022-10-16 13:06:19,574 INFO L158 Benchmark]: RCFGBuilder took 3683.19ms. Allocated memory was 203.4MB in the beginning and 406.8MB in the end (delta: 203.4MB). Free memory was 116.3MB in the beginning and 314.0MB in the end (delta: -197.8MB). Peak memory consumption was 70.8MB. Max. memory is 8.0GB. [2022-10-16 13:06:19,574 INFO L158 Benchmark]: TraceAbstraction took 123672.71ms. Allocated memory was 406.8MB in the beginning and 2.8GB in the end (delta: 2.4GB). Free memory was 313.5MB in the beginning and 2.3GB in the end (delta: -2.0GB). Peak memory consumption was 893.9MB. Max. memory is 8.0GB. [2022-10-16 13:06:19,580 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 155.2MB. Free memory is still 125.2MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 2677.98ms. Allocated memory was 155.2MB in the beginning and 203.4MB in the end (delta: 48.2MB). Free memory was 118.8MB in the beginning and 149.4MB in the end (delta: -30.6MB). Peak memory consumption was 100.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 245.98ms. Allocated memory is still 203.4MB. Free memory was 149.4MB in the beginning and 133.7MB in the end (delta: 15.7MB). Peak memory consumption was 15.7MB. Max. memory is 8.0GB. * Boogie Preprocessor took 272.12ms. Allocated memory is still 203.4MB. Free memory was 133.7MB in the beginning and 116.3MB in the end (delta: 17.4MB). Peak memory consumption was 17.8MB. Max. memory is 8.0GB. * RCFGBuilder took 3683.19ms. Allocated memory was 203.4MB in the beginning and 406.8MB in the end (delta: 203.4MB). Free memory was 116.3MB in the beginning and 314.0MB in the end (delta: -197.8MB). Peak memory consumption was 70.8MB. Max. memory is 8.0GB. * TraceAbstraction took 123672.71ms. Allocated memory was 406.8MB in the beginning and 2.8GB in the end (delta: 2.4GB). Free memory was 313.5MB in the beginning and 2.3GB in the end (delta: -2.0GB). Peak memory consumption was 893.9MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 6287]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 7744, overapproximation of bitwiseOr at line 6319, overapproximation of bitwiseAnd at line 6903. Possible FailurePath: [L6408] int LDV_IN_INTERRUPT = 1; [L6409] int ldv_timer_1_0 ; [L6410] struct timer_list *ldv_timer_list_1_3 ; [L6411] int ldv_timer_1_3 ; [L6412] struct timer_list *ldv_timer_list_1_1 ; [L6413] struct timer_list *ldv_timer_list_1_0 ; [L6414] int ldv_state_variable_0 ; [L6415] int ldv_timer_1_2 ; [L6416] int ldv_timer_1_1 ; [L6417] int ldv_state_variable_2 ; [L6418] struct timer_list *ldv_timer_list_1_2 ; [L6419] int ref_cnt ; [L6420] int ldv_state_variable_1 ; [L6421] int usb_counter ; [L6422] struct usb_interface *if_usb_driver_group1 ; [L6483-L6488] static struct lbs_fw_table const fw_table[6U] = { {1, "libertas/usb8388_olpc.bin", (char const *)0}, {1, "libertas/usb8388_v9.bin", (char const *)0}, {1, "libertas/usb8388_v5.bin", (char const *)0}, {1, "libertas/usb8388.bin", (char const *)0}, {1, "usb8388.bin", (char const *)0}, {2, "libertas/usb8682.bin", (char const *)0}}; [L6489-L6494] static struct usb_device_id if_usb_table[3U] = { {3U, 4742U, 8193U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1UL}, {3U, 1443U, 33672U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1UL}}; [L6495] struct usb_device_id const __mod_usb_device_table ; [L7724-L7739] static struct usb_driver if_usb_driver = {"usb8xxx", & if_usb_probe, & if_usb_disconnect, 0, & if_usb_suspend, & if_usb_resume, & if_usb_resume, 0, 0, (struct usb_device_id const *)(& if_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L7755] int ldv_retval_0 ; [L7756] int ldv_retval_4 ; [L7757] int ldv_retval_1 ; [L7760] int ldv_retval_3 ; [L7761] int ldv_retval_2 ; [L8243] int INTERF_STATE = 0; [L8244] int SERIAL_STATE = 0; [L8245] void *usb_intfdata = 0; [L8246] struct urb *usb_urb = 0; [L8247] struct usb_device *usb_dev = 0; [L8248] int dev_counter = 0; [L8249] int completeFnIntCounter = 0; [L8250] int completeFnBulkCounter = 0; [L8251] void (*completeFnInt)(struct urb * ) ; [L8252] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7950] struct usb_device_id *ldvarg1 ; [L7951] void *tmp ; [L7952] pm_message_t ldvarg0 ; [L7953] int tmp___0 ; [L7954] int tmp___1 ; [L7955] int tmp___2 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={182:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7957] CALL, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6350] void *p ; [L6351] void *tmp ; [L6352] int tmp___0 ; [L6354] tmp___0 = __VERIFIER_nondet_int() [L6355] COND TRUE tmp___0 != 0 [L6356] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=32, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp___0=-3, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7957] RET, EXPR ldv_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldv_zalloc(32UL)={0:0}, ldvarg0={182:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7957] tmp = ldv_zalloc(32UL) [L7958] ldvarg1 = (struct usb_device_id *)tmp [L7959] FCALL ldv_initialize() [L7960] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={182:0}, ldvarg1={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={182:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7961] CALL timer_init_1() [L7799] ldv_timer_1_0 = 0 [L7800] ldv_timer_1_1 = 0 [L7801] ldv_timer_1_2 = 0 [L7802] ldv_timer_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7961] RET timer_init_1() [L7962] ldv_state_variable_1 = 1 [L7963] ref_cnt = 0 [L7964] ldv_state_variable_0 = 1 [L7965] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={182:0}, ldvarg1={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7967] tmp___0 = __VERIFIER_nondet_int() [L7969] case 0: [L7975] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={182:0}, ldvarg1={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7976] COND TRUE ldv_state_variable_0 != 0 [L7977] tmp___1 = __VERIFIER_nondet_int() [L7979] case 0: [L7987] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={182:0}, ldvarg1={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=1, tmp___1=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7988] COND TRUE ldv_state_variable_0 == 1 [L7989] CALL, EXPR if_usb_driver_init() [L7742] int tmp ; [L7744] CALL, EXPR ldv_usb_register_driver_20(& if_usb_driver, & __this_module, "usb8xxx") [L8215] ldv_func_ret_type___2 ldv_func_res ; [L8216] int tmp ; [L8218] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8620] return __VERIFIER_nondet_int(); [L8218] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8218] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8219] ldv_func_res = tmp [L8220] ldv_state_variable_2 = 1 [L8221] usb_counter = 0 [L8222] CALL ldv_usb_driver_2() [L7808] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7810] CALL, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6350] void *p ; [L6351] void *tmp ; [L6352] int tmp___0 ; [L6354] tmp___0 = __VERIFIER_nondet_int() [L6355] COND TRUE tmp___0 != 0 [L6356] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=1520, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1520, tmp___0=-5, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7810] RET, EXPR ldv_zalloc(1520UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldv_zalloc(1520UL)={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7810] tmp = ldv_zalloc(1520UL) [L7811] if_usb_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8222] RET ldv_usb_driver_2() [L8223] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, ldv_func_arg1={180:0}, ldv_func_arg1={180:0}, ldv_func_arg2={4027448023:4027448035}, ldv_func_arg2={4027448023:4027448035}, ldv_func_arg3={177:0}, ldv_func_arg3={177:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7744] RET, EXPR ldv_usb_register_driver_20(& if_usb_driver, & __this_module, "usb8xxx") [L7744] tmp = ldv_usb_register_driver_20(& if_usb_driver, & __this_module, "usb8xxx") [L7745] return (tmp); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7989] RET, EXPR if_usb_driver_init() [L7989] ldv_retval_0 = if_usb_driver_init() [L7990] COND TRUE ldv_retval_0 == 0 [L7991] ldv_state_variable_0 = 3 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={182:0}, ldvarg1={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=1, tmp___1=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7994] COND FALSE !(ldv_retval_0 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={182:0}, ldvarg1={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=1, tmp___1=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7967] tmp___0 = __VERIFIER_nondet_int() [L7969] case 0: [L7975] case 1: [L8009] case 2: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={182:0}, ldvarg1={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2, tmp___1=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8010] COND TRUE ldv_state_variable_2 != 0 [L8011] tmp___2 = __VERIFIER_nondet_int() [L8013] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldvarg0={182:0}, ldvarg1={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8014] COND TRUE ldv_state_variable_2 == 1 [L8015] CALL if_usb_probe(if_usb_driver_group1, (struct usb_device_id const *)ldvarg1) [L6629] struct usb_device *udev ; [L6630] struct usb_host_interface *iface_desc ; [L6631] struct usb_endpoint_descriptor *endpoint ; [L6632] struct lbs_private *priv ; [L6633] struct if_usb_card *cardp ; [L6634] int r ; [L6635] int i ; [L6636] void *tmp ; [L6637] struct lock_class_key __key ; [L6638] char const *tmp___0 ; [L6639] struct thread_info *tmp___1 ; [L6640] int tmp___2 ; [L6641] char const *tmp___3 ; [L6642] struct thread_info *tmp___4 ; [L6643] char const *tmp___5 ; [L6644] struct thread_info *tmp___6 ; [L6645] int tmp___7 ; [L6646] char const *tmp___8 ; [L6647] struct thread_info *tmp___9 ; [L6648] char const *tmp___10 ; [L6649] struct thread_info *tmp___11 ; [L6650] int tmp___12 ; [L6651] int tmp___13 ; [L6652] char const *tmp___14 ; [L6653] struct thread_info *tmp___15 ; [L6654] char const *tmp___16 ; [L6655] struct thread_info *tmp___17 ; [L6656] struct urb *tmp___18 ; [L6657] char const *tmp___19 ; [L6658] struct thread_info *tmp___20 ; [L6659] struct urb *tmp___21 ; [L6660] char const *tmp___22 ; [L6661] struct thread_info *tmp___23 ; [L6663] r = -12 VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6664] CALL, EXPR interface_to_usbdev(intf) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8098] struct usb_device *tmp ; [L8100] CALL, EXPR ldv_interface_to_usbdev() [L8356] void *result ; [L8357] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1181, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6333] void *p ; [L6334] void *tmp ; [L6335] int tmp___0 ; [L6337] tmp___0 = __VERIFIER_nondet_int() [L6338] COND FALSE !(tmp___0 != 0) [L6341] tmp = malloc(size) [L6342] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1181, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-8589934591:0}, ref_cnt=0, SERIAL_STATE=0, size=1181, tmp={-8589934591:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6343] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6329] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6343] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1181, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-8589934591:0}, ref_cnt=0, SERIAL_STATE=0, size=1181, tmp={-8589934591:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6344] return (p); VAL [={0:0}, ={0:0}, \old(size)=1181, \result={-8589934591:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-8589934591:0}, ref_cnt=0, SERIAL_STATE=0, size=1181, tmp={-8589934591:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-8589934591:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8359] tmp = ldv_malloc(sizeof(struct usb_device)) [L8360] result = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, result={-8589934591:0}, SERIAL_STATE=0, tmp={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8361] COND TRUE (unsigned long )result != (unsigned long )((void *)0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, result={-8589934591:0}, SERIAL_STATE=0, tmp={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8365] return (result); VAL [={0:0}, ={0:0}, \result={-8589934591:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, result={-8589934591:0}, SERIAL_STATE=0, tmp={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8100] RET, EXPR ldv_interface_to_usbdev() [L8100] tmp = ldv_interface_to_usbdev() [L8101] return (tmp); VAL [={0:0}, ={0:0}, \result={-8589934591:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6664] RET, EXPR interface_to_usbdev(intf) VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, interface_to_usbdev(intf)={-8589934591:0}, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6664] udev = interface_to_usbdev(intf) [L6665] CALL, EXPR kzalloc(320UL, 208U) [L6317] void *tmp ; VAL [={0:0}, ={0:0}, \old(flags)=208, \old(size)=320, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, flags=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=320, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6319] CALL, EXPR kmalloc(size, flags | 32768U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6308] void *tmp___2 ; [L6310] CALL, EXPR __kmalloc(size, flags) [L6303] CALL, EXPR ldv_malloc(size) VAL [={0:0}, ={0:0}, \old(size)=320, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6333] void *p ; [L6334] void *tmp ; [L6335] int tmp___0 ; [L6337] tmp___0 = __VERIFIER_nondet_int() [L6338] COND FALSE !(tmp___0 != 0) [L6341] tmp = malloc(size) [L6342] p = tmp VAL [={0:0}, ={0:0}, \old(size)=320, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-12884901887:0}, ref_cnt=0, SERIAL_STATE=0, size=320, tmp={-12884901887:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6343] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6329] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6343] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=320, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-12884901887:0}, ref_cnt=0, SERIAL_STATE=0, size=320, tmp={-12884901887:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6344] return (p); VAL [={0:0}, ={0:0}, \old(size)=320, \result={-12884901887:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-12884901887:0}, ref_cnt=0, SERIAL_STATE=0, size=320, tmp={-12884901887:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6303] RET, EXPR ldv_malloc(size) VAL [={0:0}, ={0:0}, \old(size)=320, \old(t)=4027448034, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(size)={-12884901887:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=320, t=4027448034, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6303] return ldv_malloc(size); [L6310] RET, EXPR __kmalloc(size, flags) [L6310] tmp___2 = __kmalloc(size, flags) [L6311] return (tmp___2); VAL [={0:0}, ={0:0}, \old(flags)=4027448034, \old(size)=320, \result={-12884901887:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, flags=4027448034, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=320, tmp___2={-12884901887:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6319] RET, EXPR kmalloc(size, flags | 32768U) VAL [={0:0}, ={0:0}, \old(flags)=208, \old(size)=320, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, flags=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, kmalloc(size, flags | 32768U)={-12884901887:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=320, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6319] tmp = kmalloc(size, flags | 32768U) [L6320] return (tmp); VAL [={0:0}, ={0:0}, \old(flags)=208, \old(size)=320, \result={-12884901887:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, flags=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=320, tmp={-12884901887:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6665] RET, EXPR kzalloc(320UL, 208U) [L6665] tmp = kzalloc(320UL, 208U) [L6666] cardp = (struct if_usb_card *)tmp VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, intf={0:0}, intf={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6667] COND FALSE !((unsigned long )cardp == (unsigned long )((struct if_usb_card *)0)) [L6671] CALL reg_timer_1(& cardp->fw_timeout, & if_usb_fw_timeo, (unsigned long )cardp) [L7906] COND TRUE (unsigned long )function == (unsigned long )(& if_usb_fw_timeo) VAL [={0:0}, ={0:0}, \old(data)=-12884901887, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, data=-12884901887, dev_counter=0, function={-1:1}, function={-1:1}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, timer={-12884901887:43}, timer={-12884901887:43}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7907] CALL activate_suitable_timer_1(timer, data) VAL [={0:0}, ={0:0}, \old(data)=-12884901887, \old(ldv_timer_1_0)=0, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=0, \old(ldv_timer_list_1_0)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=0, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={0:0}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, timer={-12884901887:43}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7765] COND TRUE ldv_timer_1_0 == 0 || ldv_timer_1_0 == 2 [L7766] ldv_timer_list_1_0 = timer [L7767] ldv_timer_list_1_0->data = data [L7768] ldv_timer_1_0 = 1 VAL [={0:0}, ={0:0}, \old(data)=-12884901887, \old(ldv_timer_1_0)=0, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=0, \old(ldv_timer_list_1_0)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, data=-12884901887, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, timer={-12884901887:43}, timer={-12884901887:43}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7907] RET activate_suitable_timer_1(timer, data) VAL [={0:0}, ={0:0}, \old(data)=-12884901887, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, data=-12884901887, dev_counter=0, function={-1:1}, function={-1:1}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, timer={-12884901887:43}, timer={-12884901887:43}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L7910] return (0); VAL [={0:0}, ={0:0}, \old(data)=-12884901887, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, data=-12884901887, dev_counter=0, function={-1:1}, function={-1:1}, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, timer={-12884901887:43}, timer={-12884901887:43}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6671] RET reg_timer_1(& cardp->fw_timeout, & if_usb_fw_timeo, (unsigned long )cardp) [L6672] FCALL __init_waitqueue_head(& cardp->fw_wq, "&cardp->fw_wq", & __key) [L6673] cardp->udev = udev [L6674] EXPR id->driver_info [L6674] cardp->model = (unsigned int )id->driver_info [L6675] EXPR intf->cur_altsetting [L6675] iface_desc = intf->cur_altsetting [L6676] COND FALSE !((lbs_debug & 131072U) != 0U) VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, INTERF_STATE=0, intf={0:0}, intf={0:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6685] i = 0 VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, INTERF_STATE=0, intf={0:0}, intf={0:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6733] EXPR iface_desc->desc.bNumEndpoints VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, iface_desc->desc.bNumEndpoints=512, INTERF_STATE=0, intf={0:0}, intf={0:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6733] COND FALSE !((int )iface_desc->desc.bNumEndpoints > i) [L6737] EXPR cardp->ep_out_size [L6737] cardp->ep_out_size == 0 || cardp->ep_in_size == 0 [L6737] EXPR cardp->ep_in_size [L6737] cardp->ep_out_size == 0 || cardp->ep_in_size == 0 VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, cardp->ep_in_size=4027448021, cardp->ep_out_size=4027448024, cardp->ep_out_size == 0 || cardp->ep_in_size == 0=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, INTERF_STATE=0, intf={0:0}, intf={0:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6737] COND FALSE !(cardp->ep_out_size == 0 || cardp->ep_in_size == 0) [L6748] CALL, EXPR ldv_usb_alloc_urb_5(0, 208U) [L8120] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, iso_packets=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, mem_flags=208, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8122] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8275] struct urb *value ; [L8276] void *tmp ; [L8277] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8279] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=132, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6333] void *p ; [L6334] void *tmp ; [L6335] int tmp___0 ; [L6337] tmp___0 = __VERIFIER_nondet_int() [L6338] COND FALSE !(tmp___0 != 0) [L6341] tmp = malloc(size) [L6342] p = tmp VAL [={0:0}, ={0:0}, \old(size)=132, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-17179869183:0}, ref_cnt=0, SERIAL_STATE=0, size=132, tmp={-17179869183:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6343] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6329] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6343] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=132, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-17179869183:0}, ref_cnt=0, SERIAL_STATE=0, size=132, tmp={-17179869183:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6344] return (p); VAL [={0:0}, ={0:0}, \old(size)=132, \old(usb_urb)=0, \old(usb_urb)=0, \result={-17179869183:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-17179869183:0}, ref_cnt=0, SERIAL_STATE=0, size=132, tmp={-17179869183:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8279] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-17179869183:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8279] tmp = ldv_malloc(sizeof(struct urb)) [L8280] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-17179869183:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={-17179869183:0}] [L8281] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L6367] int tmp ; [L6369] tmp = __VERIFIER_nondet_int() [L6370] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}] [L8281] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldv_undef_int()=1, ref_cnt=0, SERIAL_STATE=0, tmp={-17179869183:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={-17179869183:0}] [L8281] tmp___0 = ldv_undef_int() [L8282] COND TRUE \read(tmp___0) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-17179869183:0}, tmp___0=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, value={-17179869183:0}] [L8283] COND TRUE (unsigned long )value != (unsigned long )((struct urb *)0) [L8284] usb_urb = value VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-17179869183:0}, tmp___0=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}, value={-17179869183:0}] [L8289] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=0, \result={-17179869183:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-17179869183:0}, tmp___0=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}, value={-17179869183:0}] [L8122] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, iso_packets=0, lbs_debug=4027448031, ldv_alloc_urb()={-17179869183:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, mem_flags=208, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8122] tmp = ldv_alloc_urb() [L8123] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={-17179869183:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, iso_packets=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, mem_flags=208, ref_cnt=0, SERIAL_STATE=0, tmp={-17179869183:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6748] RET, EXPR ldv_usb_alloc_urb_5(0, 208U) [L6748] tmp___18 = ldv_usb_alloc_urb_5(0, 208U) [L6749] cardp->rx_urb = tmp___18 VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, INTERF_STATE=0, intf={0:0}, intf={0:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, tmp___18={-17179869183:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6750] COND FALSE !((unsigned long )tmp___18 == (unsigned long )((struct urb *)0)) [L6761] CALL, EXPR ldv_usb_alloc_urb_6(0, 208U) [L8128] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, iso_packets=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, mem_flags=208, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8130] CALL, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=-17179869183, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8275] struct urb *value ; [L8276] void *tmp ; [L8277] int tmp___0 ; VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=-17179869183, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8279] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=132, \old(usb_urb)=-17179869183, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6333] void *p ; [L6334] void *tmp ; [L6335] int tmp___0 ; [L6337] tmp___0 = __VERIFIER_nondet_int() [L6338] COND TRUE tmp___0 != 0 [L6339] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=132, \old(usb_urb)=-17179869183, \old(usb_urb)=0, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=132, tmp___0=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8279] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=-17179869183, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8279] tmp = ldv_malloc(sizeof(struct urb)) [L8280] value = tmp VAL [={0:0}, ={0:0}, \old(usb_urb)=-17179869183, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}, value={0:0}] [L8281] CALL, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=-17179869183, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6367] int tmp ; [L6369] tmp = __VERIFIER_nondet_int() [L6370] return (tmp); VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=-17179869183, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8281] RET, EXPR ldv_undef_int() VAL [={0:0}, ={0:0}, \old(usb_urb)=-17179869183, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ldv_undef_int()=0, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}, value={0:0}] [L8281] tmp___0 = ldv_undef_int() [L8282] COND FALSE !(\read(tmp___0)) VAL [={0:0}, ={0:0}, \old(usb_urb)=0, \old(usb_urb)=-17179869183, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}, value={0:0}] [L8289] return (usb_urb); VAL [={0:0}, ={0:0}, \old(usb_urb)=-17179869183, \old(usb_urb)=0, \result={-17179869183:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}, value={0:0}] [L8130] RET, EXPR ldv_alloc_urb() VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, iso_packets=0, lbs_debug=4027448031, ldv_alloc_urb()={-17179869183:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, mem_flags=208, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8130] tmp = ldv_alloc_urb() [L8131] return (tmp); VAL [={0:0}, ={0:0}, \old(iso_packets)=0, \old(mem_flags)=208, \result={-17179869183:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, iso_packets=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, mem_flags=208, ref_cnt=0, SERIAL_STATE=0, tmp={-17179869183:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6761] RET, EXPR ldv_usb_alloc_urb_6(0, 208U) [L6761] tmp___21 = ldv_usb_alloc_urb_6(0, 208U) [L6762] cardp->tx_urb = tmp___21 VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, INTERF_STATE=0, intf={0:0}, intf={0:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, tmp___18={-17179869183:0}, tmp___21={-17179869183:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6763] COND FALSE !((unsigned long )tmp___21 == (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, INTERF_STATE=0, intf={0:0}, intf={0:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, tmp___18={-17179869183:0}, tmp___21={-17179869183:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6774] CALL, EXPR kmalloc(1574UL, 208U) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6308] void *tmp___2 ; [L6310] CALL, EXPR __kmalloc(size, flags) [L6303] CALL, EXPR ldv_malloc(size) VAL [={0:0}, ={0:0}, \old(size)=1574, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6333] void *p ; [L6334] void *tmp ; [L6335] int tmp___0 ; [L6337] tmp___0 = __VERIFIER_nondet_int() [L6338] COND FALSE !(tmp___0 != 0) [L6341] tmp = malloc(size) [L6342] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1574, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-4294967295:0}, ref_cnt=0, SERIAL_STATE=0, size=1574, tmp={-4294967295:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6343] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6329] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6343] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1574, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-4294967295:0}, ref_cnt=0, SERIAL_STATE=0, size=1574, tmp={-4294967295:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6344] return (p); VAL [={0:0}, ={0:0}, \old(size)=1574, \result={-4294967295:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, p={-4294967295:0}, ref_cnt=0, SERIAL_STATE=0, size=1574, tmp={-4294967295:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6303] RET, EXPR ldv_malloc(size) VAL [={0:0}, ={0:0}, \old(size)=1574, \old(t)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_malloc(size)={-4294967295:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1574, t=208, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6303] return ldv_malloc(size); [L6310] RET, EXPR __kmalloc(size, flags) [L6310] tmp___2 = __kmalloc(size, flags) [L6311] return (tmp___2); VAL [={0:0}, ={0:0}, \old(flags)=208, \old(size)=1574, \result={-4294967295:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, flags=208, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1574, tmp___2={-4294967295:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6774] RET, EXPR kmalloc(1574UL, 208U) VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, INTERF_STATE=0, intf={0:0}, intf={0:0}, kmalloc(1574UL, 208U)={-4294967295:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, tmp___18={-17179869183:0}, tmp___21={-17179869183:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6774] cardp->ep_out_buf = kmalloc(1574UL, 208U) [L6775] EXPR cardp->ep_out_buf VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, cardp->ep_out_buf={-4294967295:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, INTERF_STATE=0, intf={0:0}, intf={0:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, tmp___18={-17179869183:0}, tmp___21={-17179869183:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6775] COND FALSE !((unsigned long )cardp->ep_out_buf == (unsigned long )((void *)0)) [L6786] CALL, EXPR lbs_add_card((void *)cardp, & intf->dev) [L8529] CALL, EXPR ldv_malloc(sizeof(struct lbs_private)) VAL [={0:0}, ={0:0}, \old(size)=8422, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6333] void *p ; [L6334] void *tmp ; [L6335] int tmp___0 ; [L6337] tmp___0 = __VERIFIER_nondet_int() [L6338] COND TRUE tmp___0 != 0 [L6339] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=8422, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, size=8422, tmp___0=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8529] RET, EXPR ldv_malloc(sizeof(struct lbs_private)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, arg0={-12884901887:0}, arg0={-12884901887:0}, arg1={0:32}, arg1={0:32}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct lbs_private))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L8529] return ldv_malloc(sizeof(struct lbs_private)); [L6786] RET, EXPR lbs_add_card((void *)cardp, & intf->dev) [L6786] priv = lbs_add_card((void *)cardp, & intf->dev) [L6787] COND TRUE (unsigned long )priv == (unsigned long )((struct lbs_private *)0) VAL [={0:0}, ={0:0}, __key={181:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, i=0, id={0:0}, id={0:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, iface_desc={4027448036:-11}, INTERF_STATE=0, intf={0:0}, intf={0:0}, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, priv={0:0}, r=-12, ref_cnt=0, SERIAL_STATE=0, tmp={-12884901887:0}, tmp___18={-17179869183:0}, tmp___21={-17179869183:0}, udev={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6809] CALL if_usb_reset_device(cardp) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(dev_counter)=0, \old(ldv_timer_1_0)=1, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=43, \old(ldv_timer_list_1_0)=-12884901887, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, \old(usb_dev)=0, \old(usb_dev)=0, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=-17179869183, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6897] struct cmd_header *cmd ; [L6898] int ret ; [L6899] struct thread_info *tmp ; [L6900] struct thread_info *tmp___0 ; [L6902] EXPR cardp->ep_out_buf [L6902] cmd = (struct cmd_header *)cardp->ep_out_buf + 4U [L6903] COND FALSE !((lbs_debug & 131073U) == 131073U) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(dev_counter)=0, \old(ldv_timer_1_0)=1, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=43, \old(ldv_timer_list_1_0)=-12884901887, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, \old(usb_dev)=0, \old(usb_dev)=0, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=-17179869183, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, cardp={-12884901887:0}, cmd={-4294967295:32}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6909] EXPR cardp->ep_out_buf [L6909] *((__le32 *)cardp->ep_out_buf) = 4027448014U [L6910] cmd->command = 5U [L6911] cmd->size = 8U [L6912] cmd->result = 0U [L6913] cmd->seqnum = 23130U [L6914] EXPR cardp->ep_out_buf VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(dev_counter)=0, \old(ldv_timer_1_0)=1, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=-12884901887, \old(ldv_timer_list_1_0)=43, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, \old(usb_dev)=0, \old(usb_dev)=0, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=-17179869183, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, cardp={-12884901887:0}, cardp->ep_out_buf={-4294967295:0}, cmd={-4294967295:32}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6914] CALL usb_tx_block(cardp, (uint8_t *)cardp->ep_out_buf, 12) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(dev_counter)=0, \old(ldv_timer_1_0)=1, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=-12884901887, \old(ldv_timer_list_1_0)=43, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, \old(nb)=12, \old(usb_dev)=0, \old(usb_dev)=0, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=-17179869183, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, payload={-4294967295:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6929] int ret ; [L6930] char const *tmp ; [L6931] struct thread_info *tmp___0 ; [L6932] unsigned int tmp___1 ; [L6933] char const *tmp___2 ; [L6934] struct thread_info *tmp___3 ; [L6936] EXPR cardp->surprise_removed VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(dev_counter)=0, \old(ldv_timer_1_0)=1, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=43, \old(ldv_timer_list_1_0)=-12884901887, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, \old(nb)=12, \old(usb_dev)=0, \old(usb_dev)=0, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=-17179869183, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, cardp={-12884901887:0}, cardp->surprise_removed=256, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, nb=12, payload={-4294967295:0}, payload={-4294967295:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6936] COND FALSE !((unsigned int )cardp->surprise_removed != 0U) [L6948] EXPR cardp->udev [L6948] EXPR cardp->ep_out VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(dev_counter)=0, \old(ldv_timer_1_0)=1, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=-12884901887, \old(ldv_timer_list_1_0)=43, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, \old(nb)=12, \old(usb_dev)=0, \old(usb_dev)=0, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=-17179869183, \old(usb_urb)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, cardp={-12884901887:0}, cardp={-12884901887:0}, cardp->ep_out=183, cardp->udev={-8589934591:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, nb=12, payload={-4294967295:0}, payload={-4294967295:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6948] CALL __create_pipe(cardp->udev, (unsigned int )cardp->ep_out) VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(dev_counter)=0, \old(endpoint)=183, \old(ldv_timer_1_0)=1, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=43, \old(ldv_timer_list_1_0)=-12884901887, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, \old(usb_dev)=0, \old(usb_dev)=0, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=-17179869183, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={-8589934591:0}, dev_counter=0, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6287] EXPR dev->devnum VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(dev_counter)=0, \old(endpoint)=183, \old(ldv_timer_1_0)=1, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=43, \old(ldv_timer_list_1_0)=-12884901887, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, \old(usb_dev)=0, \old(usb_dev)=0, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=-17179869183, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={-8589934591:0}, dev={-8589934591:0}, dev->devnum=8388608, dev_counter=0, endpoint=183, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] [L6287] dev->devnum << 8 VAL [={0:0}, ={0:0}, \old()=0, \old()=0, \old(completeFnBulkCounter)=0, \old(completeFnIntCounter)=0, \old(dev_counter)=0, \old(endpoint)=183, \old(ldv_timer_1_0)=1, \old(ldv_timer_1_1)=0, \old(ldv_timer_1_2)=0, \old(ldv_timer_1_3)=0, \old(ldv_timer_list_1_0)=-12884901887, \old(ldv_timer_list_1_0)=43, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_1)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_2)=0, \old(ldv_timer_list_1_3)=0, \old(ldv_timer_list_1_3)=0, \old(usb_dev)=0, \old(usb_dev)=0, \old(usb_intfdata)=0, \old(usb_intfdata)=0, \old(usb_urb)=0, \old(usb_urb)=-17179869183, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={4027448023:4027448035}, completeFnBulkCounter=0, completeFnIntCounter=0, dev={-8589934591:0}, dev={-8589934591:0}, dev->devnum=8388608, dev_counter=0, endpoint=183, fw_table={178:0}, if_usb_driver={180:0}, if_usb_driver_group1={0:0}, if_usb_table={179:0}, INTERF_STATE=0, lbs_debug=4027448031, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_timer_1_0=1, ldv_timer_1_1=0, ldv_timer_1_2=0, ldv_timer_1_3=0, ldv_timer_list_1_0={-12884901887:43}, ldv_timer_list_1_1={0:0}, ldv_timer_list_1_2={0:0}, ldv_timer_list_1_3={0:0}, ref_cnt=0, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={-17179869183:0}] - UnprovableResult [Line: 8318]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8318]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6287]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7241]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7241]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8391]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8391]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6731]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6731]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8375]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8375]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8381]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8381]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8018]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8018]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8038]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8038]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8044]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8044]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 46 procedures, 866 locations, 20 error locations. Started 1 CEGAR loops. OverallTime: 123.0s, OverallIterations: 20, TraceHistogramMax: 6, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.1s, AutomataDifference: 74.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 31960 SdHoareTripleChecker+Valid, 55.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 30504 mSDsluCounter, 117843 SdHoareTripleChecker+Invalid, 49.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 91784 mSDsCounter, 15638 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 37144 IncrementalHoareTripleChecker+Invalid, 52782 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 15638 mSolverCounterUnsat, 26059 mSDtfsCounter, 37144 mSolverCounterSat, 0.8s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2771 GetRequests, 2524 SyntacticMatches, 1 SemanticMatches, 246 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 687 ImplicationChecksByTransitivity, 3.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=12181occurred in iteration=19, InterpolantAutomatonStates: 188, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 14.2s AutomataMinimizationTime, 19 MinimizatonAttempts, 21590 StatesRemovedByMinimization, 17 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 1.0s SsaConstructionTime, 8.0s SatisfiabilityAnalysisTime, 18.7s InterpolantComputationTime, 4288 NumberOfCodeBlocks, 4288 NumberOfCodeBlocksAsserted, 33 NumberOfCheckSat, 4548 ConstructedInterpolants, 0 QuantifiedInterpolants, 9530 SizeOfPredicates, 66 NumberOfNonLiveVariables, 30345 ConjunctsInSsa, 258 ConjunctsInUnsatCore, 32 InterpolantComputations, 16 PerfectInterpolantSequences, 2134/2297 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 13:06:19,649 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...