/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-47dffc7-1-144_2a-drivers--net--usb--cdc-phonet.ko-entry_point_ldv-val-v0.8.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 14:08:56,847 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 14:08:56,851 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 14:08:56,919 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 14:08:56,920 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 14:08:56,925 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 14:08:56,929 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 14:08:56,938 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 14:08:56,942 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 14:08:56,950 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 14:08:56,952 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 14:08:56,955 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 14:08:56,956 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 14:08:56,959 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 14:08:56,962 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 14:08:56,968 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 14:08:56,970 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 14:08:56,972 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 14:08:56,978 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 14:08:56,988 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 14:08:56,991 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 14:08:56,992 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 14:08:56,994 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 14:08:57,008 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 14:08:57,013 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 14:08:57,013 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 14:08:57,014 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 14:08:57,015 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 14:08:57,015 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 14:08:57,016 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 14:08:57,017 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 14:08:57,018 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 14:08:57,019 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 14:08:57,020 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 14:08:57,021 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 14:08:57,021 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 14:08:57,022 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 14:08:57,022 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 14:08:57,023 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 14:08:57,024 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 14:08:57,025 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 14:08:57,026 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 14:08:57,054 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 14:08:57,055 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 14:08:57,055 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 14:08:57,055 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 14:08:57,056 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 14:08:57,056 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 14:08:57,059 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 14:08:57,060 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 14:08:57,060 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 14:08:57,060 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 14:08:57,060 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 14:08:57,060 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 14:08:57,061 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 14:08:57,061 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 14:08:57,061 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 14:08:57,061 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 14:08:57,061 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 14:08:57,063 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 14:08:57,064 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 14:08:57,064 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 14:08:57,064 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 14:08:57,064 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 14:08:57,065 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 14:08:57,065 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 14:08:57,065 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 14:08:57,065 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 14:08:57,065 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 14:08:57,066 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 14:08:57,066 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 14:08:57,066 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 14:08:57,066 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 14:08:57,066 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 14:08:57,067 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 14:08:57,067 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 14:08:57,493 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 14:08:57,522 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 14:08:57,527 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 14:08:57,529 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 14:08:57,530 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 14:08:57,532 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-47dffc7-1-144_2a-drivers--net--usb--cdc-phonet.ko-entry_point_ldv-val-v0.8.cil.out.i [2022-10-16 14:08:57,633 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0c16c6402/d1e7c2358c274cfabd5b5c438dacba5b/FLAG7302eebf2 [2022-10-16 14:08:58,703 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 14:08:58,704 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-47dffc7-1-144_2a-drivers--net--usb--cdc-phonet.ko-entry_point_ldv-val-v0.8.cil.out.i [2022-10-16 14:08:58,748 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0c16c6402/d1e7c2358c274cfabd5b5c438dacba5b/FLAG7302eebf2 [2022-10-16 14:08:59,124 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0c16c6402/d1e7c2358c274cfabd5b5c438dacba5b [2022-10-16 14:08:59,127 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 14:08:59,133 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 14:08:59,135 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 14:08:59,136 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 14:08:59,140 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 14:08:59,141 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 02:08:59" (1/1) ... [2022-10-16 14:08:59,142 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3606a02a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:08:59, skipping insertion in model container [2022-10-16 14:08:59,143 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 02:08:59" (1/1) ... [2022-10-16 14:08:59,151 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 14:08:59,241 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 14:09:00,769 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-47dffc7-1-144_2a-drivers--net--usb--cdc-phonet.ko-entry_point_ldv-val-v0.8.cil.out.i[188986,188999] [2022-10-16 14:09:00,862 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 14:09:00,906 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 14:09:01,318 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-47dffc7-1-144_2a-drivers--net--usb--cdc-phonet.ko-entry_point_ldv-val-v0.8.cil.out.i[188986,188999] [2022-10-16 14:09:01,353 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 14:09:01,433 INFO L208 MainTranslator]: Completed translation [2022-10-16 14:09:01,434 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01 WrapperNode [2022-10-16 14:09:01,434 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 14:09:01,435 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 14:09:01,436 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 14:09:01,436 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 14:09:01,447 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,497 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,655 INFO L138 Inliner]: procedures = 153, calls = 606, calls flagged for inlining = 71, calls inlined = 71, statements flattened = 1873 [2022-10-16 14:09:01,655 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 14:09:01,656 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 14:09:01,657 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 14:09:01,657 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 14:09:01,670 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,670 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,704 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,705 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,774 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,787 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,801 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,822 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,856 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 14:09:01,857 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 14:09:01,858 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 14:09:01,861 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 14:09:01,862 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (1/1) ... [2022-10-16 14:09:01,870 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 14:09:01,886 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 14:09:01,905 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 14:09:01,923 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 14:09:01,967 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_11 [2022-10-16 14:09:01,967 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_11 [2022-10-16 14:09:01,967 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2022-10-16 14:09:01,967 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2022-10-16 14:09:01,967 INFO L130 BoogieDeclarations]: Found specification of procedure usbpn_ioctl [2022-10-16 14:09:01,967 INFO L138 BoogieDeclarations]: Found implementation of procedure usbpn_ioctl [2022-10-16 14:09:01,968 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 14:09:01,968 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_3 [2022-10-16 14:09:01,968 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_3 [2022-10-16 14:09:01,968 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_8 [2022-10-16 14:09:01,968 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_8 [2022-10-16 14:09:01,968 INFO L130 BoogieDeclarations]: Found specification of procedure usbpn_close [2022-10-16 14:09:01,968 INFO L138 BoogieDeclarations]: Found implementation of procedure usbpn_close [2022-10-16 14:09:01,968 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 14:09:01,968 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 14:09:01,968 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-10-16 14:09:01,969 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-10-16 14:09:01,969 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 14:09:01,969 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2022-10-16 14:09:01,969 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2022-10-16 14:09:01,969 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-10-16 14:09:01,969 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-10-16 14:09:01,969 INFO L130 BoogieDeclarations]: Found specification of procedure free_netdev [2022-10-16 14:09:01,970 INFO L138 BoogieDeclarations]: Found implementation of procedure free_netdev [2022-10-16 14:09:01,970 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2022-10-16 14:09:01,970 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2022-10-16 14:09:01,970 INFO L130 BoogieDeclarations]: Found specification of procedure lowmem_page_address [2022-10-16 14:09:01,970 INFO L138 BoogieDeclarations]: Found implementation of procedure lowmem_page_address [2022-10-16 14:09:01,970 INFO L130 BoogieDeclarations]: Found specification of procedure usb_driver_release_interface [2022-10-16 14:09:01,970 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_driver_release_interface [2022-10-16 14:09:01,971 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-10-16 14:09:01,971 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-10-16 14:09:01,971 INFO L130 BoogieDeclarations]: Found specification of procedure netif_wake_queue [2022-10-16 14:09:01,971 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_wake_queue [2022-10-16 14:09:01,971 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-10-16 14:09:01,971 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-10-16 14:09:01,972 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 14:09:01,972 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 14:09:01,972 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2022-10-16 14:09:01,972 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2022-10-16 14:09:01,972 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_size_call_parameter [2022-10-16 14:09:01,972 INFO L130 BoogieDeclarations]: Found specification of procedure usbpn_disconnect [2022-10-16 14:09:01,972 INFO L138 BoogieDeclarations]: Found implementation of procedure usbpn_disconnect [2022-10-16 14:09:01,972 INFO L130 BoogieDeclarations]: Found specification of procedure usbpn_set_mtu [2022-10-16 14:09:01,973 INFO L138 BoogieDeclarations]: Found implementation of procedure usbpn_set_mtu [2022-10-16 14:09:01,973 INFO L130 BoogieDeclarations]: Found specification of procedure skb_add_rx_frag [2022-10-16 14:09:01,973 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_add_rx_frag [2022-10-16 14:09:01,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 14:09:01,973 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 14:09:01,973 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 14:09:01,974 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-10-16 14:09:01,974 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-10-16 14:09:01,974 INFO L130 BoogieDeclarations]: Found specification of procedure rx_submit [2022-10-16 14:09:01,974 INFO L138 BoogieDeclarations]: Found implementation of procedure rx_submit [2022-10-16 14:09:01,975 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2022-10-16 14:09:01,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2022-10-16 14:09:01,975 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-10-16 14:09:01,975 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-10-16 14:09:01,975 INFO L130 BoogieDeclarations]: Found specification of procedure netif_stop_queue [2022-10-16 14:09:01,975 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_stop_queue [2022-10-16 14:09:01,976 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 14:09:01,976 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2022-10-16 14:09:01,976 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2022-10-16 14:09:01,976 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-10-16 14:09:01,976 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-10-16 14:09:01,976 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 14:09:01,976 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2022-10-16 14:09:01,977 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2022-10-16 14:09:01,977 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 14:09:01,977 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 14:09:01,977 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-10-16 14:09:01,977 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 14:09:01,977 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 14:09:01,977 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 14:09:01,978 INFO L130 BoogieDeclarations]: Found specification of procedure put_page [2022-10-16 14:09:01,978 INFO L138 BoogieDeclarations]: Found implementation of procedure put_page [2022-10-16 14:09:01,978 INFO L130 BoogieDeclarations]: Found specification of procedure skb_end_pointer [2022-10-16 14:09:01,978 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_end_pointer [2022-10-16 14:09:01,978 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-10-16 14:09:01,978 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-10-16 14:09:01,978 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 14:09:01,979 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 14:09:01,979 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-10-16 14:09:01,979 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-10-16 14:09:01,979 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-10-16 14:09:01,979 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-10-16 14:09:01,979 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2022-10-16 14:09:01,979 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2022-10-16 14:09:01,980 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_get_tx_queue [2022-10-16 14:09:01,980 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_get_tx_queue [2022-10-16 14:09:01,980 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2022-10-16 14:09:01,980 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2022-10-16 14:09:01,980 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 14:09:01,980 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 14:09:01,980 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 14:09:01,981 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 14:09:01,981 INFO L130 BoogieDeclarations]: Found specification of procedure rx_complete [2022-10-16 14:09:01,981 INFO L138 BoogieDeclarations]: Found implementation of procedure rx_complete [2022-10-16 14:09:02,518 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 14:09:02,524 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 14:09:03,344 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-10-16 14:09:06,079 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 14:09:06,108 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 14:09:06,108 INFO L300 CfgBuilder]: Removed 0 assume(true) statements. [2022-10-16 14:09:06,114 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 02:09:06 BoogieIcfgContainer [2022-10-16 14:09:06,115 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 14:09:06,120 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 14:09:06,121 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 14:09:06,126 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 14:09:06,126 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 02:08:59" (1/3) ... [2022-10-16 14:09:06,128 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@654bb2e6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 02:09:06, skipping insertion in model container [2022-10-16 14:09:06,128 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 02:09:01" (2/3) ... [2022-10-16 14:09:06,128 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@654bb2e6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 02:09:06, skipping insertion in model container [2022-10-16 14:09:06,128 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 02:09:06" (3/3) ... [2022-10-16 14:09:06,130 INFO L112 eAbstractionObserver]: Analyzing ICFG linux-stable-47dffc7-1-144_2a-drivers--net--usb--cdc-phonet.ko-entry_point_ldv-val-v0.8.cil.out.i [2022-10-16 14:09:06,201 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 14:09:06,201 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 26 error locations. [2022-10-16 14:09:06,328 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 14:09:06,336 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@37198c05, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 14:09:06,337 INFO L358 AbstractCegarLoop]: Starting to check reachability of 26 error locations. [2022-10-16 14:09:06,346 INFO L276 IsEmpty]: Start isEmpty. Operand has 657 states, 478 states have (on average 1.395397489539749) internal successors, (667), 522 states have internal predecessors, (667), 113 states have call successors, (113), 40 states have call predecessors, (113), 39 states have return successors, (107), 105 states have call predecessors, (107), 107 states have call successors, (107) [2022-10-16 14:09:06,365 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2022-10-16 14:09:06,365 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 14:09:06,366 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 14:09:06,367 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_3Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_3Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 24 more)] === [2022-10-16 14:09:06,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 14:09:06,375 INFO L85 PathProgramCache]: Analyzing trace with hash -301173937, now seen corresponding path program 1 times [2022-10-16 14:09:06,388 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 14:09:06,389 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [92169818] [2022-10-16 14:09:06,389 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:09:06,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 14:09:06,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 14:09:07,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:07,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:07,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 14:09:07,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:07,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:07,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 14:09:07,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:07,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:07,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-10-16 14:09:07,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-16 14:09:07,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-10-16 14:09:07,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:07,535 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2022-10-16 14:09:07,536 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 14:09:07,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [92169818] [2022-10-16 14:09:07,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [92169818] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 14:09:07,539 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 14:09:07,540 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-16 14:09:07,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1707814986] [2022-10-16 14:09:07,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 14:09:07,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-16 14:09:07,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 14:09:07,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-16 14:09:07,600 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-16 14:09:07,604 INFO L87 Difference]: Start difference. First operand has 657 states, 478 states have (on average 1.395397489539749) internal successors, (667), 522 states have internal predecessors, (667), 113 states have call successors, (113), 40 states have call predecessors, (113), 39 states have return successors, (107), 105 states have call predecessors, (107), 107 states have call successors, (107) Second operand has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (8), 5 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 14:09:11,557 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 14:09:14,313 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.28s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 14:09:16,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 14:09:16,455 INFO L93 Difference]: Finished difference Result 1994 states and 2775 transitions. [2022-10-16 14:09:16,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 14:09:16,459 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (8), 5 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 80 [2022-10-16 14:09:16,460 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 14:09:16,496 INFO L225 Difference]: With dead ends: 1994 [2022-10-16 14:09:16,496 INFO L226 Difference]: Without dead ends: 1290 [2022-10-16 14:09:16,512 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=54, Unknown=0, NotChecked=0, Total=90 [2022-10-16 14:09:16,517 INFO L413 NwaCegarLoop]: 912 mSDtfsCounter, 2161 mSDsluCounter, 1744 mSDsCounter, 0 mSdLazyCounter, 1176 mSolverCounterSat, 903 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2226 SdHoareTripleChecker+Valid, 2656 SdHoareTripleChecker+Invalid, 2079 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 903 IncrementalHoareTripleChecker+Valid, 1176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.3s IncrementalHoareTripleChecker+Time [2022-10-16 14:09:16,519 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2226 Valid, 2656 Invalid, 2079 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [903 Valid, 1176 Invalid, 0 Unknown, 0 Unchecked, 8.3s Time] [2022-10-16 14:09:16,545 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1290 states. [2022-10-16 14:09:16,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1290 to 1101. [2022-10-16 14:09:16,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1101 states, 825 states have (on average 1.3612121212121213) internal successors, (1123), 863 states have internal predecessors, (1123), 178 states have call successors, (178), 72 states have call predecessors, (178), 72 states have return successors, (178), 174 states have call predecessors, (178), 178 states have call successors, (178) [2022-10-16 14:09:16,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1101 states to 1101 states and 1479 transitions. [2022-10-16 14:09:16,810 INFO L78 Accepts]: Start accepts. Automaton has 1101 states and 1479 transitions. Word has length 80 [2022-10-16 14:09:16,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 14:09:16,811 INFO L495 AbstractCegarLoop]: Abstraction has 1101 states and 1479 transitions. [2022-10-16 14:09:16,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (8), 5 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 14:09:16,812 INFO L276 IsEmpty]: Start isEmpty. Operand 1101 states and 1479 transitions. [2022-10-16 14:09:16,817 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2022-10-16 14:09:16,817 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 14:09:16,817 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 14:09:16,818 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 14:09:16,818 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_3Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_3Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 24 more)] === [2022-10-16 14:09:16,819 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 14:09:16,819 INFO L85 PathProgramCache]: Analyzing trace with hash -837864741, now seen corresponding path program 1 times [2022-10-16 14:09:16,819 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 14:09:16,820 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [64892699] [2022-10-16 14:09:16,820 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:09:16,820 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 14:09:16,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 14:09:17,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:17,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:17,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 14:09:17,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:17,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:17,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 14:09:17,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:17,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:17,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-10-16 14:09:17,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-16 14:09:17,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:17,168 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2022-10-16 14:09:17,168 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 14:09:17,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [64892699] [2022-10-16 14:09:17,169 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [64892699] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 14:09:17,169 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 14:09:17,169 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 14:09:17,169 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802537702] [2022-10-16 14:09:17,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 14:09:17,172 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 14:09:17,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 14:09:17,173 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 14:09:17,173 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-10-16 14:09:17,173 INFO L87 Difference]: Start difference. First operand 1101 states and 1479 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-10-16 14:09:20,076 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.48s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 14:09:21,590 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 14:09:23,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 14:09:23,674 INFO L93 Difference]: Finished difference Result 3426 states and 4667 transitions. [2022-10-16 14:09:23,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 14:09:23,675 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 80 [2022-10-16 14:09:23,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 14:09:23,699 INFO L225 Difference]: With dead ends: 3426 [2022-10-16 14:09:23,699 INFO L226 Difference]: Without dead ends: 2353 [2022-10-16 14:09:23,706 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-10-16 14:09:23,708 INFO L413 NwaCegarLoop]: 1244 mSDtfsCounter, 1569 mSDsluCounter, 1217 mSDsCounter, 0 mSdLazyCounter, 790 mSolverCounterSat, 683 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1641 SdHoareTripleChecker+Valid, 2461 SdHoareTripleChecker+Invalid, 1473 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 683 IncrementalHoareTripleChecker+Valid, 790 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-10-16 14:09:23,709 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1641 Valid, 2461 Invalid, 1473 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [683 Valid, 790 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2022-10-16 14:09:23,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2353 states. [2022-10-16 14:09:23,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2353 to 2045. [2022-10-16 14:09:23,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2045 states, 1542 states have (on average 1.350194552529183) internal successors, (2082), 1605 states have internal predecessors, (2082), 329 states have call successors, (329), 136 states have call predecessors, (329), 148 states have return successors, (369), 322 states have call predecessors, (369), 329 states have call successors, (369) [2022-10-16 14:09:23,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2045 states to 2045 states and 2780 transitions. [2022-10-16 14:09:23,903 INFO L78 Accepts]: Start accepts. Automaton has 2045 states and 2780 transitions. Word has length 80 [2022-10-16 14:09:23,904 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 14:09:23,904 INFO L495 AbstractCegarLoop]: Abstraction has 2045 states and 2780 transitions. [2022-10-16 14:09:23,904 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 3 states have internal predecessors, (36), 1 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-10-16 14:09:23,904 INFO L276 IsEmpty]: Start isEmpty. Operand 2045 states and 2780 transitions. [2022-10-16 14:09:23,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-10-16 14:09:23,908 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 14:09:23,909 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 14:09:23,909 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 14:09:23,909 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_3Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_3Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 24 more)] === [2022-10-16 14:09:23,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 14:09:23,910 INFO L85 PathProgramCache]: Analyzing trace with hash 2078301437, now seen corresponding path program 1 times [2022-10-16 14:09:23,910 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 14:09:23,985 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1660046301] [2022-10-16 14:09:23,989 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:09:23,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 14:09:24,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 14:09:24,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:24,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:24,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 14:09:24,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:24,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:24,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 14:09:24,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:24,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:24,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-10-16 14:09:24,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-16 14:09:24,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-10-16 14:09:24,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:24,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:24,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-10-16 14:09:24,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:24,453 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2022-10-16 14:09:24,453 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 14:09:24,453 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1660046301] [2022-10-16 14:09:24,454 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1660046301] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 14:09:24,454 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 14:09:24,454 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-16 14:09:24,454 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1737968188] [2022-10-16 14:09:24,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 14:09:24,455 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-16 14:09:24,455 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 14:09:24,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-16 14:09:24,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-16 14:09:24,457 INFO L87 Difference]: Start difference. First operand 2045 states and 2780 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-16 14:09:29,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 14:09:29,609 INFO L93 Difference]: Finished difference Result 5374 states and 7378 transitions. [2022-10-16 14:09:29,610 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 14:09:29,610 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 109 [2022-10-16 14:09:29,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 14:09:29,636 INFO L225 Difference]: With dead ends: 5374 [2022-10-16 14:09:29,637 INFO L226 Difference]: Without dead ends: 3357 [2022-10-16 14:09:29,646 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=54, Unknown=0, NotChecked=0, Total=90 [2022-10-16 14:09:29,647 INFO L413 NwaCegarLoop]: 1182 mSDtfsCounter, 2195 mSDsluCounter, 1159 mSDsCounter, 0 mSdLazyCounter, 743 mSolverCounterSat, 942 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2277 SdHoareTripleChecker+Valid, 2341 SdHoareTripleChecker+Invalid, 1685 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 942 IncrementalHoareTripleChecker+Valid, 743 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.8s IncrementalHoareTripleChecker+Time [2022-10-16 14:09:29,648 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2277 Valid, 2341 Invalid, 1685 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [942 Valid, 743 Invalid, 0 Unknown, 0 Unchecked, 4.8s Time] [2022-10-16 14:09:29,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3357 states. [2022-10-16 14:09:29,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3357 to 2936. [2022-10-16 14:09:29,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2936 states, 2227 states have (on average 1.3488998652896274) internal successors, (3004), 2307 states have internal predecessors, (3004), 468 states have call successors, (468), 197 states have call predecessors, (468), 215 states have return successors, (527), 459 states have call predecessors, (527), 468 states have call successors, (527) [2022-10-16 14:09:29,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2936 states to 2936 states and 3999 transitions. [2022-10-16 14:09:29,853 INFO L78 Accepts]: Start accepts. Automaton has 2936 states and 3999 transitions. Word has length 109 [2022-10-16 14:09:29,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 14:09:29,858 INFO L495 AbstractCegarLoop]: Abstraction has 2936 states and 3999 transitions. [2022-10-16 14:09:29,858 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-16 14:09:29,859 INFO L276 IsEmpty]: Start isEmpty. Operand 2936 states and 3999 transitions. [2022-10-16 14:09:29,869 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2022-10-16 14:09:29,869 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 14:09:29,869 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 14:09:29,870 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 14:09:29,870 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_3Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_3Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 24 more)] === [2022-10-16 14:09:29,870 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 14:09:29,870 INFO L85 PathProgramCache]: Analyzing trace with hash 348297345, now seen corresponding path program 1 times [2022-10-16 14:09:29,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 14:09:29,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1048617277] [2022-10-16 14:09:29,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:09:29,873 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 14:09:29,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 14:09:30,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:30,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:30,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 14:09:30,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:30,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:30,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 14:09:30,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:30,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:30,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-10-16 14:09:30,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-16 14:09:30,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-10-16 14:09:30,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:30,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:30,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2022-10-16 14:09:30,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:30,559 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2022-10-16 14:09:30,559 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 14:09:30,560 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1048617277] [2022-10-16 14:09:30,561 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1048617277] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 14:09:30,561 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 14:09:30,561 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 14:09:30,563 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [96014463] [2022-10-16 14:09:30,565 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 14:09:30,566 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-16 14:09:30,566 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 14:09:30,567 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-16 14:09:30,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2022-10-16 14:09:30,568 INFO L87 Difference]: Start difference. First operand 2936 states and 3999 transitions. Second operand has 7 states, 6 states have (on average 8.666666666666666) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 14:09:34,043 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.29s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 14:09:37,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 14:09:37,060 INFO L93 Difference]: Finished difference Result 4711 states and 6572 transitions. [2022-10-16 14:09:37,061 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-10-16 14:09:37,061 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 8.666666666666666) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2022-10-16 14:09:37,062 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 14:09:37,102 INFO L225 Difference]: With dead ends: 4711 [2022-10-16 14:09:37,102 INFO L226 Difference]: Without dead ends: 4705 [2022-10-16 14:09:37,106 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2022-10-16 14:09:37,108 INFO L413 NwaCegarLoop]: 1163 mSDtfsCounter, 1668 mSDsluCounter, 1862 mSDsCounter, 0 mSdLazyCounter, 1422 mSolverCounterSat, 770 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1767 SdHoareTripleChecker+Valid, 3025 SdHoareTripleChecker+Invalid, 2192 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 770 IncrementalHoareTripleChecker+Valid, 1422 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.0s IncrementalHoareTripleChecker+Time [2022-10-16 14:09:37,109 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1767 Valid, 3025 Invalid, 2192 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [770 Valid, 1422 Invalid, 0 Unknown, 0 Unchecked, 6.0s Time] [2022-10-16 14:09:37,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4705 states. [2022-10-16 14:09:37,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4705 to 4059. [2022-10-16 14:09:37,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4059 states, 3090 states have (on average 1.3469255663430422) internal successors, (4162), 3191 states have internal predecessors, (4162), 649 states have call successors, (649), 270 states have call predecessors, (649), 294 states have return successors, (727), 635 states have call predecessors, (727), 649 states have call successors, (727) [2022-10-16 14:09:37,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4059 states to 4059 states and 5538 transitions. [2022-10-16 14:09:37,405 INFO L78 Accepts]: Start accepts. Automaton has 4059 states and 5538 transitions. Word has length 114 [2022-10-16 14:09:37,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 14:09:37,406 INFO L495 AbstractCegarLoop]: Abstraction has 4059 states and 5538 transitions. [2022-10-16 14:09:37,406 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 8.666666666666666) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-10-16 14:09:37,406 INFO L276 IsEmpty]: Start isEmpty. Operand 4059 states and 5538 transitions. [2022-10-16 14:09:37,411 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2022-10-16 14:09:37,411 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 14:09:37,411 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 14:09:37,412 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 14:09:37,412 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_3Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_3Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 24 more)] === [2022-10-16 14:09:37,412 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 14:09:37,413 INFO L85 PathProgramCache]: Analyzing trace with hash 2105347151, now seen corresponding path program 1 times [2022-10-16 14:09:37,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 14:09:37,413 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2010950788] [2022-10-16 14:09:37,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:09:37,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 14:09:37,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 14:09:38,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:38,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:38,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 14:09:38,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:38,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:38,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 14:09:38,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:38,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:38,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-10-16 14:09:38,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-16 14:09:38,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-10-16 14:09:38,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:38,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:38,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2022-10-16 14:09:38,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:38,507 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2022-10-16 14:09:38,507 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 14:09:38,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2010950788] [2022-10-16 14:09:38,511 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2010950788] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 14:09:38,511 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 14:09:38,512 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-10-16 14:09:38,512 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1321424493] [2022-10-16 14:09:38,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 14:09:38,514 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-10-16 14:09:38,514 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 14:09:38,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-10-16 14:09:38,515 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-10-16 14:09:38,515 INFO L87 Difference]: Start difference. First operand 4059 states and 5538 transitions. Second operand has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 4 states have internal predecessors, (53), 1 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-10-16 14:09:44,405 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.70s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 14:09:46,551 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 14:09:49,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 14:09:49,893 INFO L93 Difference]: Finished difference Result 8707 states and 12052 transitions. [2022-10-16 14:09:49,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-16 14:09:49,894 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 4 states have internal predecessors, (53), 1 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) Word has length 115 [2022-10-16 14:09:49,895 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 14:09:49,931 INFO L225 Difference]: With dead ends: 8707 [2022-10-16 14:09:49,931 INFO L226 Difference]: Without dead ends: 4687 [2022-10-16 14:09:49,949 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2022-10-16 14:09:49,950 INFO L413 NwaCegarLoop]: 795 mSDtfsCounter, 519 mSDsluCounter, 3161 mSDsCounter, 0 mSdLazyCounter, 1749 mSolverCounterSat, 273 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 539 SdHoareTripleChecker+Valid, 3956 SdHoareTripleChecker+Invalid, 2023 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 273 IncrementalHoareTripleChecker+Valid, 1749 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.0s IncrementalHoareTripleChecker+Time [2022-10-16 14:09:49,951 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [539 Valid, 3956 Invalid, 2023 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [273 Valid, 1749 Invalid, 1 Unknown, 0 Unchecked, 11.0s Time] [2022-10-16 14:09:49,958 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4687 states. [2022-10-16 14:09:50,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4687 to 4067. [2022-10-16 14:09:50,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4067 states, 3094 states have (on average 1.3464770523594054) internal successors, (4166), 3199 states have internal predecessors, (4166), 649 states have call successors, (649), 270 states have call predecessors, (649), 298 states have return successors, (751), 635 states have call predecessors, (751), 649 states have call successors, (751) [2022-10-16 14:09:50,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4067 states to 4067 states and 5566 transitions. [2022-10-16 14:09:50,250 INFO L78 Accepts]: Start accepts. Automaton has 4067 states and 5566 transitions. Word has length 115 [2022-10-16 14:09:50,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 14:09:50,252 INFO L495 AbstractCegarLoop]: Abstraction has 4067 states and 5566 transitions. [2022-10-16 14:09:50,252 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.888888888888889) internal successors, (53), 4 states have internal predecessors, (53), 1 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-10-16 14:09:50,252 INFO L276 IsEmpty]: Start isEmpty. Operand 4067 states and 5566 transitions. [2022-10-16 14:09:50,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-10-16 14:09:50,254 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 14:09:50,255 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 14:09:50,255 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 14:09:50,255 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_3Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_3Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 24 more)] === [2022-10-16 14:09:50,256 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 14:09:50,256 INFO L85 PathProgramCache]: Analyzing trace with hash 155368419, now seen corresponding path program 1 times [2022-10-16 14:09:50,256 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 14:09:50,256 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [907943496] [2022-10-16 14:09:50,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:09:50,257 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 14:09:50,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:50,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 14:09:50,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:50,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:50,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:50,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:50,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:50,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 14:09:50,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:50,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:50,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:50,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:50,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:50,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 14:09:50,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:51,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:51,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-10-16 14:09:51,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-16 14:09:51,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-10-16 14:09:51,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:51,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:51,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2022-10-16 14:09:51,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 14:09:51,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,236 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2022-10-16 14:09:51,236 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 14:09:51,236 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [907943496] [2022-10-16 14:09:51,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [907943496] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 14:09:51,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [437041774] [2022-10-16 14:09:51,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:09:51,237 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 14:09:51,237 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 14:09:51,245 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 14:09:51,290 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 14:09:51,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:51,818 INFO L263 TraceCheckSpWp]: Trace formula consists of 1492 conjuncts, 15 conjunts are in the unsatisfiable core [2022-10-16 14:09:51,839 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 14:09:51,947 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-10-16 14:09:51,948 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 14:09:51,948 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [437041774] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 14:09:51,948 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 14:09:51,949 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 10 [2022-10-16 14:09:51,949 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1883667566] [2022-10-16 14:09:51,949 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 14:09:51,950 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 14:09:51,950 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 14:09:51,950 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 14:09:51,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=68, Unknown=0, NotChecked=0, Total=90 [2022-10-16 14:09:51,951 INFO L87 Difference]: Start difference. First operand 4067 states and 5566 transitions. Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-16 14:09:52,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 14:09:52,255 INFO L93 Difference]: Finished difference Result 8114 states and 11111 transitions. [2022-10-16 14:09:52,255 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 14:09:52,256 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 121 [2022-10-16 14:09:52,256 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 14:09:52,287 INFO L225 Difference]: With dead ends: 8114 [2022-10-16 14:09:52,287 INFO L226 Difference]: Without dead ends: 4068 [2022-10-16 14:09:52,303 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 147 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2022-10-16 14:09:52,305 INFO L413 NwaCegarLoop]: 832 mSDtfsCounter, 3 mSDsluCounter, 1659 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 2491 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-16 14:09:52,309 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 2491 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-16 14:09:52,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4068 states. [2022-10-16 14:09:52,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4068 to 4068. [2022-10-16 14:09:52,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4068 states, 3095 states have (on average 1.3463651050080776) internal successors, (4167), 3200 states have internal predecessors, (4167), 649 states have call successors, (649), 270 states have call predecessors, (649), 298 states have return successors, (751), 635 states have call predecessors, (751), 649 states have call successors, (751) [2022-10-16 14:09:52,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4068 states to 4068 states and 5567 transitions. [2022-10-16 14:09:52,628 INFO L78 Accepts]: Start accepts. Automaton has 4068 states and 5567 transitions. Word has length 121 [2022-10-16 14:09:52,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 14:09:52,628 INFO L495 AbstractCegarLoop]: Abstraction has 4068 states and 5567 transitions. [2022-10-16 14:09:52,630 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-16 14:09:52,630 INFO L276 IsEmpty]: Start isEmpty. Operand 4068 states and 5567 transitions. [2022-10-16 14:09:52,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2022-10-16 14:09:52,632 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 14:09:52,632 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 14:09:52,680 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-16 14:09:52,847 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-10-16 14:09:52,847 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_3Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_3Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 24 more)] === [2022-10-16 14:09:52,848 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 14:09:52,848 INFO L85 PathProgramCache]: Analyzing trace with hash 174281259, now seen corresponding path program 1 times [2022-10-16 14:09:52,848 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 14:09:52,848 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1644158509] [2022-10-16 14:09:52,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:09:52,849 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 14:09:52,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 14:09:53,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:53,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:53,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 14:09:53,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:53,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:53,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-10-16 14:09:53,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:53,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:53,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-10-16 14:09:53,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-10-16 14:09:53,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-10-16 14:09:53,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 14:09:53,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-10-16 14:09:53,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-16 14:09:53,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-16 14:09:53,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:53,933 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2022-10-16 14:09:53,933 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 14:09:53,933 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1644158509] [2022-10-16 14:09:53,934 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1644158509] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 14:09:53,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1459124465] [2022-10-16 14:09:53,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:09:53,934 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 14:09:53,935 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 14:09:53,936 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 14:09:53,958 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 14:09:54,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 14:09:54,618 INFO L263 TraceCheckSpWp]: Trace formula consists of 1522 conjuncts, 17 conjunts are in the unsatisfiable core [2022-10-16 14:09:54,631 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 14:09:54,707 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 61 proven. 1 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2022-10-16 14:09:54,707 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 14:09:54,889 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2022-10-16 14:09:54,890 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1459124465] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 14:09:54,890 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 14:09:54,890 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2022-10-16 14:09:54,890 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639981870] [2022-10-16 14:09:54,890 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 14:09:54,891 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-10-16 14:09:54,891 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 14:09:54,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-10-16 14:09:54,892 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=137, Unknown=0, NotChecked=0, Total=182 [2022-10-16 14:09:54,892 INFO L87 Difference]: Start difference. First operand 4068 states and 5567 transitions. Second operand has 14 states, 14 states have (on average 6.142857142857143) internal successors, (86), 10 states have internal predecessors, (86), 2 states have call successors, (23), 6 states have call predecessors, (23), 4 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2022-10-16 14:10:01,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 14:10:01,136 INFO L93 Difference]: Finished difference Result 8737 states and 12109 transitions. [2022-10-16 14:10:01,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-10-16 14:10:01,137 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 6.142857142857143) internal successors, (86), 10 states have internal predecessors, (86), 2 states have call successors, (23), 6 states have call predecessors, (23), 4 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 123 [2022-10-16 14:10:01,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 14:10:01,175 INFO L225 Difference]: With dead ends: 8737 [2022-10-16 14:10:01,176 INFO L226 Difference]: Without dead ends: 4687 [2022-10-16 14:10:01,194 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 269 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 82 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-10-16 14:10:01,196 INFO L413 NwaCegarLoop]: 793 mSDtfsCounter, 1003 mSDsluCounter, 3032 mSDsCounter, 0 mSdLazyCounter, 1646 mSolverCounterSat, 556 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1023 SdHoareTripleChecker+Valid, 3825 SdHoareTripleChecker+Invalid, 2202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 556 IncrementalHoareTripleChecker+Valid, 1646 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.7s IncrementalHoareTripleChecker+Time [2022-10-16 14:10:01,196 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1023 Valid, 3825 Invalid, 2202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [556 Valid, 1646 Invalid, 0 Unknown, 0 Unchecked, 5.7s Time] [2022-10-16 14:10:01,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4687 states. [2022-10-16 14:10:01,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4687 to 4071. [2022-10-16 14:10:01,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4071 states, 3098 states have (on average 1.3460296965784377) internal successors, (4170), 3203 states have internal predecessors, (4170), 649 states have call successors, (649), 270 states have call predecessors, (649), 298 states have return successors, (751), 635 states have call predecessors, (751), 649 states have call successors, (751) [2022-10-16 14:10:01,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4071 states to 4071 states and 5570 transitions. [2022-10-16 14:10:01,533 INFO L78 Accepts]: Start accepts. Automaton has 4071 states and 5570 transitions. Word has length 123 [2022-10-16 14:10:01,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 14:10:01,533 INFO L495 AbstractCegarLoop]: Abstraction has 4071 states and 5570 transitions. [2022-10-16 14:10:01,533 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 6.142857142857143) internal successors, (86), 10 states have internal predecessors, (86), 2 states have call successors, (23), 6 states have call predecessors, (23), 4 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2022-10-16 14:10:01,565 INFO L276 IsEmpty]: Start isEmpty. Operand 4071 states and 5570 transitions. [2022-10-16 14:10:01,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 130 [2022-10-16 14:10:01,569 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 14:10:01,569 INFO L195 NwaCegarLoop]: trace histogram [8, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 14:10:01,620 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 14:10:01,770 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-10-16 14:10:01,770 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [ldv_usb_fill_bulk_urb_3Err0ASSERT_VIOLATIONINTEGER_OVERFLOW, ldv_usb_fill_bulk_urb_3Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (and 24 more)] === [2022-10-16 14:10:01,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 14:10:01,771 INFO L85 PathProgramCache]: Analyzing trace with hash 434386531, now seen corresponding path program 2 times [2022-10-16 14:10:01,772 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 14:10:01,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [147474847] [2022-10-16 14:10:01,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 14:10:01,772 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 14:10:02,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 14:10:02,353 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 14:10:02,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 14:10:02,928 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 14:10:02,929 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 14:10:02,930 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 26 remaining) [2022-10-16 14:10:02,934 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_usb_fill_bulk_urb_3Err0ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 26 remaining) [2022-10-16 14:10:02,934 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ldv_usb_fill_bulk_urb_3Err1ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 26 remaining) [2022-10-16 14:10:02,934 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location lowmem_page_addressErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 26 remaining) [2022-10-16 14:10:02,935 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location lowmem_page_addressErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 26 remaining) [2022-10-16 14:10:02,935 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location lowmem_page_addressErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 26 remaining) [2022-10-16 14:10:02,936 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location lowmem_page_addressErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 26 remaining) [2022-10-16 14:10:02,936 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 26 remaining) [2022-10-16 14:10:02,936 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __create_pipeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 26 remaining) [2022-10-16 14:10:02,936 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 26 remaining) [2022-10-16 14:10:02,937 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 26 remaining) [2022-10-16 14:10:02,937 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 26 remaining) [2022-10-16 14:10:02,937 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 26 remaining) [2022-10-16 14:10:02,938 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 26 remaining) [2022-10-16 14:10:02,938 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 26 remaining) [2022-10-16 14:10:02,938 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 26 remaining) [2022-10-16 14:10:02,939 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 26 remaining) [2022-10-16 14:10:02,939 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 26 remaining) [2022-10-16 14:10:02,939 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 26 remaining) [2022-10-16 14:10:02,940 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 26 remaining) [2022-10-16 14:10:02,940 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 26 remaining) [2022-10-16 14:10:02,940 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 26 remaining) [2022-10-16 14:10:02,941 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 26 remaining) [2022-10-16 14:10:02,941 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 26 remaining) [2022-10-16 14:10:02,941 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr16ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 26 remaining) [2022-10-16 14:10:02,942 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 26 remaining) [2022-10-16 14:10:02,942 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-16 14:10:02,948 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1] [2022-10-16 14:10:02,955 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 14:10:03,039 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,043 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,044 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,044 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,044 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,045 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,045 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,045 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,046 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,046 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,046 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,046 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,047 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,047 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,047 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled [2022-10-16 14:10:03,047 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled [2022-10-16 14:10:03,047 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,048 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,049 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled [2022-10-16 14:10:03,050 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled [2022-10-16 14:10:03,051 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,051 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,051 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,051 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,052 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,052 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,052 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,052 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,053 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,053 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,053 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,053 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,053 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,054 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,054 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled [2022-10-16 14:10:03,054 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled [2022-10-16 14:10:03,054 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,055 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled [2022-10-16 14:10:03,055 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled [2022-10-16 14:10:03,055 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled [2022-10-16 14:10:03,250 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 02:10:03 BoogieIcfgContainer [2022-10-16 14:10:03,251 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 14:10:03,251 INFO L158 Benchmark]: Toolchain (without parser) took 64122.57ms. Allocated memory was 156.2MB in the beginning and 442.5MB in the end (delta: 286.3MB). Free memory was 121.4MB in the beginning and 163.3MB in the end (delta: -41.9MB). Peak memory consumption was 244.7MB. Max. memory is 8.0GB. [2022-10-16 14:10:03,252 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 156.2MB. Free memory is still 128.0MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 14:10:03,252 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2299.24ms. Allocated memory was 156.2MB in the beginning and 199.2MB in the end (delta: 43.0MB). Free memory was 121.1MB in the beginning and 133.0MB in the end (delta: -11.8MB). Peak memory consumption was 60.6MB. Max. memory is 8.0GB. [2022-10-16 14:10:03,252 INFO L158 Benchmark]: Boogie Procedure Inliner took 220.01ms. Allocated memory is still 199.2MB. Free memory was 132.4MB in the beginning and 121.4MB in the end (delta: 11.0MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. [2022-10-16 14:10:03,253 INFO L158 Benchmark]: Boogie Preprocessor took 200.18ms. Allocated memory is still 199.2MB. Free memory was 121.4MB in the beginning and 108.3MB in the end (delta: 13.1MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. [2022-10-16 14:10:03,253 INFO L158 Benchmark]: RCFGBuilder took 4257.49ms. Allocated memory was 199.2MB in the beginning and 306.2MB in the end (delta: 107.0MB). Free memory was 108.3MB in the beginning and 90.5MB in the end (delta: 17.8MB). Peak memory consumption was 131.4MB. Max. memory is 8.0GB. [2022-10-16 14:10:03,254 INFO L158 Benchmark]: TraceAbstraction took 57130.43ms. Allocated memory was 306.2MB in the beginning and 442.5MB in the end (delta: 136.3MB). Free memory was 90.0MB in the beginning and 163.3MB in the end (delta: -73.3MB). Peak memory consumption was 62.5MB. Max. memory is 8.0GB. [2022-10-16 14:10:03,256 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 156.2MB. Free memory is still 128.0MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 2299.24ms. Allocated memory was 156.2MB in the beginning and 199.2MB in the end (delta: 43.0MB). Free memory was 121.1MB in the beginning and 133.0MB in the end (delta: -11.8MB). Peak memory consumption was 60.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 220.01ms. Allocated memory is still 199.2MB. Free memory was 132.4MB in the beginning and 121.4MB in the end (delta: 11.0MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. * Boogie Preprocessor took 200.18ms. Allocated memory is still 199.2MB. Free memory was 121.4MB in the beginning and 108.3MB in the end (delta: 13.1MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. * RCFGBuilder took 4257.49ms. Allocated memory was 199.2MB in the beginning and 306.2MB in the end (delta: 107.0MB). Free memory was 108.3MB in the beginning and 90.5MB in the end (delta: 17.8MB). Peak memory consumption was 131.4MB. Max. memory is 8.0GB. * TraceAbstraction took 57130.43ms. Allocated memory was 306.2MB in the beginning and 442.5MB in the end (delta: 136.3MB). Free memory was 90.0MB in the beginning and 163.3MB in the end (delta: -73.3MB). Peak memory consumption was 62.5MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memset_#res#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 6073]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 6189. Possible FailurePath: [L5443] int LDV_IN_INTERRUPT = 1; [L5444] int ldv_state_variable_2 ; [L5445] int ref_cnt ; [L5446] int ldv_state_variable_1 ; [L5447] struct net_device *usbpn_ops_group1 ; [L5448] int usb_counter ; [L5449] struct usb_interface *usbpn_driver_group1 ; [L5450] int ldv_state_variable_0 ; [L5623] static unsigned int const rxq_size = 17U; [L5984-L5987] static struct net_device_ops const usbpn_ops = {0, 0, & usbpn_open, & usbpn_close, & usbpn_xmit, 0, 0, 0, 0, 0, & usbpn_ioctl, 0, & usbpn_set_mtu, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L6005-L6007] static struct usb_device_id usbpn_ids[2U] = { {385U, 1057U, (unsigned short)0, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 2U, 254U, (unsigned char)0, (unsigned char)0, 0UL}}; [L6008] struct usb_device_id const __mod_usb_device_table ; [L6179-L6184] static struct usb_driver usbpn_driver = {"cdc_phonet", & usbpn_probe, & usbpn_disconnect, 0, 0, 0, 0, 0, 0, (struct usb_device_id const *)(& usbpn_ids), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L6200] int ldv_retval_2 ; [L6201] int ldv_retval_0 ; [L6205] int ldv_retval_1 ; [L6207] int ldv_retval_3 ; [L6559] int INTERF_STATE = 0; [L6560] int SERIAL_STATE = 0; [L6561] void *usb_intfdata = (void *)0; [L6562] struct urb *usb_urb = (struct urb *)0; [L6563] struct usb_device *usb_dev = (struct usb_device *)0; [L6564] int dev_counter = 0; [L6565] int completeFnIntCounter = 0; [L6566] int completeFnBulkCounter = 0; [L6567] void (*completeFnInt)(struct urb * ) ; [L6568] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6228] struct usb_device_id *ldvarg0 ; [L6229] void *tmp ; [L6230] struct sk_buff *ldvarg1 ; [L6231] void *tmp___0 ; [L6232] struct ifreq *ldvarg4 ; [L6233] void *tmp___1 ; [L6234] int ldvarg3 ; [L6235] int ldvarg2 ; [L6236] int tmp___2 ; [L6237] int tmp___3 ; [L6238] int tmp___4 ; [L6239] int tmp___5 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6241] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5397] void *p ; [L5398] void *tmp ; [L5400] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4294967298:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=32, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5400] tmp = calloc(1UL, size) [L5401] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4294967298:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={4294967298:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=32, tmp={4294967298:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5402] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5359] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5402] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4294967298:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={4294967298:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=32, tmp={4294967298:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5403] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={4294967298:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={4294967298:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={4294967298:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=32, tmp={4294967298:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6241] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={4294967298:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6241] tmp = ldv_init_zalloc(32UL) [L6242] ldvarg0 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6243] CALL, EXPR ldv_init_zalloc(240UL) VAL [={0:0}, ={0:0}, \old(size)=240, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5397] void *p ; [L5398] void *tmp ; [L5400] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=240, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-8589934591:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=240, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5400] tmp = calloc(1UL, size) [L5401] p = tmp VAL [={0:0}, ={0:0}, \old(size)=240, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-8589934591:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-8589934591:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=240, tmp={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5402] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5359] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5402] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=240, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-8589934591:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-8589934591:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=240, tmp={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5403] return (p); VAL [={0:0}, ={0:0}, \old(size)=240, \result={-8589934591:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={-8589934591:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-8589934591:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=240, tmp={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6243] RET, EXPR ldv_init_zalloc(240UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(240UL)={-8589934591:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6243] tmp___0 = ldv_init_zalloc(240UL) [L6244] ldvarg1 = (struct sk_buff *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6245] CALL, EXPR ldv_init_zalloc(40UL) VAL [={0:0}, ={0:0}, \old(size)=40, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5397] void *p ; [L5398] void *tmp ; [L5400] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=40, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={8589934593:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=40, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5400] tmp = calloc(1UL, size) [L5401] p = tmp VAL [={0:0}, ={0:0}, \old(size)=40, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={8589934593:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=40, tmp={8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5402] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5359] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5402] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=40, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={8589934593:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=40, tmp={8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5403] return (p); VAL [={0:0}, ={0:0}, \old(size)=40, \result={8589934593:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, calloc(1UL, size)={8589934593:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=40, tmp={8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6245] RET, EXPR ldv_init_zalloc(40UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(40UL)={8589934593:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6245] tmp___1 = ldv_init_zalloc(40UL) [L6246] ldvarg4 = (struct ifreq *)tmp___1 [L6247] FCALL ldv_initialize() [L6248] CALL ldv_memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5408] void *tmp ; [L5410] EXPR, FCALL memset(s, c, n) [L5410] tmp = memset(s, c, n) [L5411] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={8589934596:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, n=4, ref_cnt=0, rxq_size=17, s={8589934596:0}, s={8589934596:0}, SERIAL_STATE=0, tmp={8589934596:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6248] RET ldv_memset((void *)(& ldvarg3), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg3), 0, 4UL)={8589934596:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ldvarg4={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, tmp___1={8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6249] CALL ldv_memset((void *)(& ldvarg2), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5408] void *tmp ; [L5410] EXPR, FCALL memset(s, c, n) [L5410] tmp = memset(s, c, n) [L5411] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={8589934597:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, c=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, n=4, ref_cnt=0, rxq_size=17, s={8589934597:0}, s={8589934597:0}, SERIAL_STATE=0, tmp={8589934597:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6249] RET ldv_memset((void *)(& ldvarg2), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg2), 0, 4UL)={8589934597:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ldvarg4={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, tmp___1={8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6250] ldv_state_variable_1 = 0 [L6251] ref_cnt = 0 [L6252] ldv_state_variable_0 = 1 [L6253] ldv_state_variable_2 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ldvarg4={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, tmp___1={8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6255] tmp___2 = __VERIFIER_nondet_int() [L6257] case 0: [L6287] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ldvarg4={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, tmp___1={8589934593:0}, tmp___2=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6288] COND TRUE ldv_state_variable_0 != 0 [L6289] tmp___4 = __VERIFIER_nondet_int() [L6291] case 0: [L6299] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ldvarg4={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, tmp___1={8589934593:0}, tmp___2=1, tmp___4=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6300] COND TRUE ldv_state_variable_0 == 1 [L6301] CALL, EXPR usbpn_driver_init() [L6187] int tmp ; [L6189] CALL, EXPR ldv_usb_register_driver_17(& usbpn_driver, & __this_module, "cdc_phonet") [L6533] ldv_func_ret_type___0 ldv_func_res ; [L6534] int tmp ; [L6536] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6913] return __VERIFIER_nondet_int(); [L6536] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6536] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6537] ldv_func_res = tmp [L6538] ldv_state_variable_1 = 1 [L6539] usb_counter = 0 [L6540] CALL ldv_usb_driver_1() [L6210] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6212] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5397] void *p ; [L5398] void *tmp ; [L5400] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, calloc(1UL, size)={4294967297:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=1288, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5400] tmp = calloc(1UL, size) [L5401] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, calloc(1UL, size)={4294967297:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, p={4294967297:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=1288, tmp={4294967297:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5402] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5359] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5402] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, calloc(1UL, size)={4294967297:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, p={4294967297:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=1288, tmp={4294967297:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5403] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={4294967297:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, calloc(1UL, size)={4294967297:0}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, p={4294967297:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=1288, tmp={4294967297:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6212] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={4294967297:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={0:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6212] tmp = ldv_init_zalloc(1288UL) [L6213] usbpn_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967297:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6540] RET ldv_usb_driver_1() [L6541] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, ldv_func_arg1={31:0}, ldv_func_arg1={31:0}, ldv_func_arg2={8589934623:8589934629}, ldv_func_arg2={8589934623:8589934629}, ldv_func_arg3={28:0}, ldv_func_arg3={28:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6189] RET, EXPR ldv_usb_register_driver_17(& usbpn_driver, & __this_module, "cdc_phonet") [L6189] tmp = ldv_usb_register_driver_17(& usbpn_driver, & __this_module, "cdc_phonet") [L6190] return (tmp); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6301] RET, EXPR usbpn_driver_init() [L6301] ldv_retval_1 = usbpn_driver_init() [L6302] COND TRUE ldv_retval_1 == 0 [L6303] ldv_state_variable_0 = 3 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ldvarg4={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, tmp___1={8589934593:0}, tmp___2=1, tmp___4=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6306] COND FALSE !(ldv_retval_1 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ldvarg4={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, tmp___1={8589934593:0}, tmp___2=1, tmp___4=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6255] tmp___2 = __VERIFIER_nondet_int() [L6257] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ldvarg4={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, tmp___1={8589934593:0}, tmp___2=0, tmp___4=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6258] COND TRUE ldv_state_variable_1 != 0 [L6259] tmp___3 = __VERIFIER_nondet_int() [L6261] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={4294967298:0}, ldvarg1={-8589934591:0}, ldvarg2={8589934597:0}, ldvarg3={8589934596:0}, ldvarg4={8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={4294967298:0}, tmp___0={-8589934591:0}, tmp___1={8589934593:0}, tmp___2=0, tmp___3=0, tmp___4=1, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6262] COND TRUE ldv_state_variable_1 == 1 [L6263] CALL usbpn_probe(usbpn_driver_group1, (struct usb_device_id const *)ldvarg0) [L6012] char ifname[8U] ; [L6013] struct usb_cdc_union_desc const *union_header ; [L6014] struct usb_host_interface const *data_desc ; [L6015] struct usb_interface *data_intf ; [L6016] struct usb_device *usbdev ; [L6017] struct usb_device *tmp ; [L6018] struct net_device *dev ; [L6019] struct usbpn_dev *pnd ; [L6020] u8 *data ; [L6021] int phonet ; [L6022] int len ; [L6023] int err ; [L6024] u8 dlen ; [L6025] void *tmp___0 ; [L6026] struct lock_class_key __key ; [L6027] struct lock_class_key __key___0 ; [L6028] unsigned int tmp___1 ; [L6029] unsigned int tmp___2 ; [L6030] unsigned int tmp___3 ; [L6031] unsigned int tmp___4 ; [L6032] struct _ddebug descriptor ; [L6033] long tmp___5 ; [L6035] ifname[0] = 'u' [L6036] ifname[1] = 's' [L6037] ifname[2] = 'b' [L6038] ifname[3] = 'p' [L6039] ifname[4] = 'n' [L6040] ifname[5] = '%' [L6041] ifname[6] = 'd' [L6042] ifname[7] = '\000' [L6043] union_header = (struct usb_cdc_union_desc const *)0 [L6044] CALL, EXPR interface_to_usbdev(intf) [L6418] struct usb_device *tmp ; [L6420] CALL, EXPR ldv_interface_to_usbdev() [L6673] void *result ; [L6674] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6676] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1050, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5363] void *p ; [L5364] void *tmp ; [L5365] int tmp___0 ; [L5367] tmp___0 = __VERIFIER_nondet_int() [L5368] COND FALSE !(tmp___0 != 0) [L5371] tmp = malloc(size) [L5372] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1050, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, p={-8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=1050, tmp={-8589934593:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5373] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5359] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, cond=1, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5373] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1050, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, p={-8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=1050, tmp={-8589934593:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L5374] return (p); VAL [={0:0}, ={0:0}, \old(size)=1050, \result={-8589934593:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, p={-8589934593:0}, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, size=1050, tmp={-8589934593:0}, tmp___0=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6676] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-8589934593:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6676] tmp = ldv_malloc(sizeof(struct usb_device)) [L6677] result = tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, result={-8589934593:0}, rxq_size=17, SERIAL_STATE=0, tmp={-8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6678] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, result={-8589934593:0}, rxq_size=17, SERIAL_STATE=0, tmp={-8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6682] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-8589934593:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, result={-8589934593:0}, rxq_size=17, SERIAL_STATE=0, tmp={-8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6420] RET, EXPR ldv_interface_to_usbdev() [L6420] tmp = ldv_interface_to_usbdev() [L6421] return (tmp); VAL [={0:0}, ={0:0}, \result={-8589934593:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, dev_counter=0, INTERF_STATE=0, intf={4294967297:0}, intf={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={-8589934593:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6044] RET, EXPR interface_to_usbdev(intf) [L6044] tmp = interface_to_usbdev(intf) [L6045] usbdev = tmp [L6046] phonet = 0 [L6047] EXPR intf->altsetting [L6047] EXPR (intf->altsetting)->extra [L6047] data = (intf->altsetting)->extra [L6048] EXPR intf->altsetting [L6048] EXPR (intf->altsetting)->extralen [L6048] len = (intf->altsetting)->extralen [L6075] COND TRUE len > 2 VAL [={0:0}, ={0:0}, __key={8589934595:0}, __key___0={8589934600:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, data={8589934649:-3}, descriptor={8589934601:0}, dev_counter=0, id={4294967298:0}, id={4294967298:0}, ifname={8589934603:0}, INTERF_STATE=0, intf={4294967297:0}, intf={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, len=2147483651, phonet=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={-8589934593:0}, union_header={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbdev={-8589934593:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6051] EXPR \read(*data) [L6051] dlen = *data [L6052] COND FALSE !((unsigned int )dlen <= 2U) [L6056] EXPR data + 1UL VAL [={0:0}, ={0:0}, __key={8589934595:0}, __key___0={8589934600:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, data={8589934649:-3}, data + 1UL=43, descriptor={8589934601:0}, dev_counter=0, dlen=3, id={4294967298:0}, id={4294967298:0}, ifname={8589934603:0}, INTERF_STATE=0, intf={4294967297:0}, intf={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, len=2147483651, phonet=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={-8589934593:0}, union_header={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbdev={-8589934593:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6056] COND FALSE !((unsigned int )*(data + 1UL) == 36U) [L6072] data = data + (unsigned long )dlen VAL [={0:0}, ={0:0}, __key={8589934595:0}, __key___0={8589934600:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, data={8589934649:0}, descriptor={8589934601:0}, dev_counter=0, dlen=3, id={4294967298:0}, id={4294967298:0}, ifname={8589934603:0}, INTERF_STATE=0, intf={4294967297:0}, intf={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, len=2147483651, phonet=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={-8589934593:0}, union_header={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbdev={-8589934593:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] [L6073] len - (int )dlen VAL [={0:0}, ={0:0}, __key={8589934595:0}, __key___0={8589934600:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8589934623:8589934629}, completeFnBulkCounter=0, completeFnIntCounter=0, data={8589934649:0}, descriptor={8589934601:0}, dev_counter=0, dlen=3, id={4294967298:0}, id={4294967298:0}, ifname={8589934603:0}, INTERF_STATE=0, intf={4294967297:0}, intf={4294967297:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, len=2147483651, phonet=0, ref_cnt=0, rxq_size=17, SERIAL_STATE=0, tmp={-8589934593:0}, union_header={0:0}, usb_counter=0, usb_dev={0:0}, usb_intfdata={0:0}, usb_urb={0:0}, usbdev={-8589934593:0}, usbpn_driver={31:0}, usbpn_driver_group1={4294967297:0}, usbpn_ids={30:0}, usbpn_ops={29:0}, usbpn_ops_group1={0:0}] - UnprovableResult [Line: 6635]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6635]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5457]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5457]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5457]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5457]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5342]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 5342]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6073]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6130]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6130]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6130]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6130]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6266]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6266]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6276]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6276]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6383]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6383]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6384]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6384]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6394]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6394]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6395]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6395]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 41 procedures, 658 locations, 26 error locations. Started 1 CEGAR loops. OverallTime: 56.7s, OverallIterations: 8, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 45.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1 mSolverCounterUnknown, 9476 SdHoareTripleChecker+Valid, 42.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 9118 mSDsluCounter, 20755 SdHoareTripleChecker+Invalid, 39.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 13834 mSDsCounter, 4128 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7536 IncrementalHoareTripleChecker+Invalid, 11665 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4128 mSolverCounterUnsat, 6921 mSDtfsCounter, 7536 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 626 GetRequests, 557 SyntacticMatches, 0 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 123 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=4071occurred in iteration=7, InterpolantAutomatonStates: 53, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.9s AutomataMinimizationTime, 7 MinimizatonAttempts, 2800 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.9s SatisfiabilityAnalysisTime, 5.0s InterpolantComputationTime, 1115 NumberOfCodeBlocks, 1115 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 1099 ConstructedInterpolants, 0 QuantifiedInterpolants, 1860 SizeOfPredicates, 10 NumberOfNonLiveVariables, 3014 ConjunctsInSsa, 32 ConjunctsInUnsatCore, 10 InterpolantComputations, 6 PerfectInterpolantSequences, 903/917 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 14:10:03,321 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...