./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 23:08:33,170 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 23:08:33,246 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-64bit-Automizer_Default.epf [2023-11-06 23:08:33,252 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 23:08:33,252 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 23:08:33,285 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 23:08:33,285 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 23:08:33,286 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 23:08:33,287 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 23:08:33,287 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 23:08:33,288 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 23:08:33,289 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 23:08:33,289 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 23:08:33,290 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 23:08:33,290 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 23:08:33,291 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 23:08:33,295 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 23:08:33,299 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 23:08:33,299 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 23:08:33,300 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 23:08:33,302 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 23:08:33,302 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 23:08:33,303 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 23:08:33,305 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 23:08:33,305 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 23:08:33,306 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:08:33,306 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 23:08:33,306 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 23:08:33,307 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 23:08:33,307 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 23:08:33,309 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 23:08:33,309 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 23:08:33,309 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 23:08:33,309 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 23:08:33,310 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 23:08:33,310 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 23:08:33,310 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 [2023-11-06 23:08:33,617 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 23:08:33,650 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 23:08:33,653 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 23:08:33,654 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 23:08:33,656 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 23:08:33,657 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2023-11-06 23:08:36,804 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 23:08:37,361 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 23:08:37,362 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2023-11-06 23:08:37,405 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/data/1d54580c9/33d5fcf47c7847b1a79ab9eb8ac78865/FLAG4017f03f3 [2023-11-06 23:08:37,422 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/data/1d54580c9/33d5fcf47c7847b1a79ab9eb8ac78865 [2023-11-06 23:08:37,428 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 23:08:37,429 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 23:08:37,435 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 23:08:37,435 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 23:08:37,444 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 23:08:37,445 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:08:37" (1/1) ... [2023-11-06 23:08:37,446 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@10376d97 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:37, skipping insertion in model container [2023-11-06 23:08:37,446 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:08:37" (1/1) ... [2023-11-06 23:08:37,590 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 23:08:38,143 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2023-11-06 23:08:38,156 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2023-11-06 23:08:38,414 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2023-11-06 23:08:39,012 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:08:39,040 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 23:08:39,174 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2023-11-06 23:08:39,174 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2023-11-06 23:08:39,177 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [3798] [2023-11-06 23:08:39,183 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& current_task)); [3847] [2023-11-06 23:08:39,184 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3850] [2023-11-06 23:08:39,185 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3853] [2023-11-06 23:08:39,185 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3856] [2023-11-06 23:08:39,204 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2023-11-06 23:08:39,465 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret), "+m" (tmp___3->state): : "memory", "cc"); [5355-5356] [2023-11-06 23:08:39,480 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret), "+m" (tmp___4->state): : "memory", "cc"); [5360-5361] [2023-11-06 23:08:39,480 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret), "+m" (tmp___5->state): : "memory", "cc"); [5365-5366] [2023-11-06 23:08:39,481 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret), "+m" (tmp___6->state): : "memory", "cc"); [5370-5371] [2023-11-06 23:08:39,485 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret___0), "+m" (tmp___16->state): : "memory", "cc"); [5454-5455] [2023-11-06 23:08:39,486 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret___0), "+m" (tmp___17->state): : "memory", "cc"); [5459-5460] [2023-11-06 23:08:39,486 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret___0), "+m" (tmp___18->state): : "memory", "cc"); [5464-5465] [2023-11-06 23:08:39,487 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret___0), "+m" (tmp___19->state): : "memory", "cc"); [5469-5470] [2023-11-06 23:08:39,689 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:08:39,746 WARN L672 CHandler]: The function __VERIFIER_nondet_u16 is called, but not defined or handled by StandardFunctionHandler. [2023-11-06 23:08:39,747 WARN L672 CHandler]: The function __xchg_wrong_size is called, but not defined or handled by StandardFunctionHandler. [2023-11-06 23:08:39,747 WARN L672 CHandler]: The function __bad_percpu_size is called, but not defined or handled by StandardFunctionHandler. [2023-11-06 23:08:39,755 INFO L206 MainTranslator]: Completed translation [2023-11-06 23:08:39,756 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39 WrapperNode [2023-11-06 23:08:39,756 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 23:08:39,757 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 23:08:39,758 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 23:08:39,758 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 23:08:39,767 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:39,858 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:39,977 INFO L138 Inliner]: procedures = 170, calls = 1063, calls flagged for inlining = 81, calls inlined = 52, statements flattened = 1685 [2023-11-06 23:08:39,977 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 23:08:39,978 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 23:08:39,978 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 23:08:39,979 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 23:08:39,988 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:39,989 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:40,016 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:40,017 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:40,114 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:40,139 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:40,168 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:40,185 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:40,209 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 23:08:40,211 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 23:08:40,212 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 23:08:40,212 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 23:08:40,213 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (1/1) ... [2023-11-06 23:08:40,219 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:08:40,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:08:40,254 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 23:08:40,284 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 23:08:40,301 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_map_urb_for_dma [2023-11-06 23:08:40,301 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_map_urb_for_dma [2023-11-06 23:08:40,302 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2023-11-06 23:08:40,302 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2023-11-06 23:08:40,302 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2023-11-06 23:08:40,302 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2023-11-06 23:08:40,303 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2023-11-06 23:08:40,303 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2023-11-06 23:08:40,304 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2023-11-06 23:08:40,304 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2023-11-06 23:08:40,304 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2023-11-06 23:08:40,304 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2023-11-06 23:08:40,304 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2023-11-06 23:08:40,305 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2023-11-06 23:08:40,306 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2023-11-06 23:08:40,306 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_control [2023-11-06 23:08:40,306 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_control [2023-11-06 23:08:40,308 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_dequeue [2023-11-06 23:08:40,309 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_dequeue [2023-11-06 23:08:40,309 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2023-11-06 23:08:40,309 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2023-11-06 23:08:40,309 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2023-11-06 23:08:40,310 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2023-11-06 23:08:40,310 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_endpoint_disable [2023-11-06 23:08:40,310 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_endpoint_disable [2023-11-06 23:08:40,310 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2023-11-06 23:08:40,310 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2023-11-06 23:08:40,310 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2023-11-06 23:08:40,311 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_dev_dbg [2023-11-06 23:08:40,311 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_dev_dbg [2023-11-06 23:08:40,311 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2023-11-06 23:08:40,311 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2023-11-06 23:08:40,311 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2023-11-06 23:08:40,312 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2023-11-06 23:08:40,312 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2023-11-06 23:08:40,312 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_reset [2023-11-06 23:08:40,312 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_reset [2023-11-06 23:08:40,312 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_enqueue [2023-11-06 23:08:40,313 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_enqueue [2023-11-06 23:08:40,313 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2023-11-06 23:08:40,313 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2023-11-06 23:08:40,313 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-11-06 23:08:40,313 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_resume [2023-11-06 23:08:40,314 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_resume [2023-11-06 23:08:40,314 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 23:08:40,314 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_gpout_set_value [2023-11-06 23:08:40,314 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_gpout_set_value [2023-11-06 23:08:40,314 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-11-06 23:08:40,315 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-11-06 23:08:40,316 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2023-11-06 23:08:40,316 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2023-11-06 23:08:40,317 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2023-11-06 23:08:40,318 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2023-11-06 23:08:40,318 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2023-11-06 23:08:40,318 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2023-11-06 23:08:40,318 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-11-06 23:08:40,319 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2023-11-06 23:08:40,319 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2023-11-06 23:08:40,320 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-06 23:08:40,320 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2023-11-06 23:08:40,320 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_unmap_urb_for_dma [2023-11-06 23:08:40,320 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_unmap_urb_for_dma [2023-11-06 23:08:40,321 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2023-11-06 23:08:40,321 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2023-11-06 23:08:40,321 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2023-11-06 23:08:40,321 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2023-11-06 23:08:40,321 INFO L130 BoogieDeclarations]: Found specification of procedure to_spi_device [2023-11-06 23:08:40,322 INFO L138 BoogieDeclarations]: Found implementation of procedure to_spi_device [2023-11-06 23:08:40,322 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 23:08:40,322 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2023-11-06 23:08:40,322 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2023-11-06 23:08:40,322 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_suspend [2023-11-06 23:08:40,322 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_suspend [2023-11-06 23:08:40,323 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_get_frame_number [2023-11-06 23:08:40,323 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_get_frame_number [2023-11-06 23:08:40,324 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2023-11-06 23:08:40,324 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2023-11-06 23:08:40,324 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 23:08:40,324 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 23:08:40,324 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_status_data [2023-11-06 23:08:40,325 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_status_data [2023-11-06 23:08:40,325 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_max3421 [2023-11-06 23:08:40,325 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_max3421 [2023-11-06 23:08:40,325 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2023-11-06 23:08:40,325 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2023-11-06 23:08:40,804 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 23:08:40,808 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 23:08:41,551 INFO L771 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2023-11-06 23:08:42,423 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 23:08:42,436 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 23:08:42,436 INFO L302 CfgBuilder]: Removed 0 assume(true) statements. [2023-11-06 23:08:42,439 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:08:42 BoogieIcfgContainer [2023-11-06 23:08:42,439 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 23:08:42,442 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 23:08:42,442 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 23:08:42,445 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 23:08:42,445 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 11:08:37" (1/3) ... [2023-11-06 23:08:42,446 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4610f9bb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:08:42, skipping insertion in model container [2023-11-06 23:08:42,446 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:08:39" (2/3) ... [2023-11-06 23:08:42,446 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4610f9bb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:08:42, skipping insertion in model container [2023-11-06 23:08:42,447 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:08:42" (3/3) ... [2023-11-06 23:08:42,448 INFO L112 eAbstractionObserver]: Analyzing ICFG 43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2023-11-06 23:08:42,467 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 23:08:42,467 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 23:08:42,536 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 23:08:42,543 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@34418b5a, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 23:08:42,544 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 23:08:42,551 INFO L276 IsEmpty]: Start isEmpty. Operand has 603 states, 447 states have (on average 1.389261744966443) internal successors, (621), 457 states have internal predecessors, (621), 119 states have call successors, (119), 36 states have call predecessors, (119), 35 states have return successors, (113), 113 states have call predecessors, (113), 113 states have call successors, (113) [2023-11-06 23:08:42,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2023-11-06 23:08:42,575 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:08:42,576 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:08:42,576 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:08:42,581 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:08:42,582 INFO L85 PathProgramCache]: Analyzing trace with hash -1249524382, now seen corresponding path program 1 times [2023-11-06 23:08:42,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:08:42,592 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1910385292] [2023-11-06 23:08:42,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:08:42,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:08:42,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:43,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:08:43,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:43,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:08:43,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:43,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:08:43,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:43,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-06 23:08:43,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:43,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-06 23:08:43,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:43,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-06 23:08:43,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:43,392 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 23:08:43,392 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:08:43,393 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1910385292] [2023-11-06 23:08:43,394 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1910385292] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:08:43,395 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:08:43,398 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:08:43,400 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [989769466] [2023-11-06 23:08:43,400 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:08:43,408 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:08:43,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:08:43,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:08:43,457 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:08:43,462 INFO L87 Difference]: Start difference. First operand has 603 states, 447 states have (on average 1.389261744966443) internal successors, (621), 457 states have internal predecessors, (621), 119 states have call successors, (119), 36 states have call predecessors, (119), 35 states have return successors, (113), 113 states have call predecessors, (113), 113 states have call successors, (113) Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 23:08:46,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:08:46,575 INFO L93 Difference]: Finished difference Result 1771 states and 2548 transitions. [2023-11-06 23:08:46,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 23:08:46,578 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 59 [2023-11-06 23:08:46,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:08:46,609 INFO L225 Difference]: With dead ends: 1771 [2023-11-06 23:08:46,609 INFO L226 Difference]: Without dead ends: 1140 [2023-11-06 23:08:46,620 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2023-11-06 23:08:46,630 INFO L413 NwaCegarLoop]: 569 mSDtfsCounter, 1778 mSDsluCounter, 1220 mSDsCounter, 0 mSdLazyCounter, 963 mSolverCounterSat, 843 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1854 SdHoareTripleChecker+Valid, 1789 SdHoareTripleChecker+Invalid, 1806 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 843 IncrementalHoareTripleChecker+Valid, 963 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2023-11-06 23:08:46,632 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1854 Valid, 1789 Invalid, 1806 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [843 Valid, 963 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2023-11-06 23:08:46,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1140 states. [2023-11-06 23:08:46,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1140 to 1024. [2023-11-06 23:08:46,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1024 states, 769 states have (on average 1.377113133940182) internal successors, (1059), 772 states have internal predecessors, (1059), 190 states have call successors, (190), 65 states have call predecessors, (190), 64 states have return successors, (189), 189 states have call predecessors, (189), 189 states have call successors, (189) [2023-11-06 23:08:46,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1024 states to 1024 states and 1438 transitions. [2023-11-06 23:08:46,843 INFO L78 Accepts]: Start accepts. Automaton has 1024 states and 1438 transitions. Word has length 59 [2023-11-06 23:08:46,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:08:46,844 INFO L495 AbstractCegarLoop]: Abstraction has 1024 states and 1438 transitions. [2023-11-06 23:08:46,845 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 3 states have internal predecessors, (38), 2 states have call successors, (9), 5 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 23:08:46,845 INFO L276 IsEmpty]: Start isEmpty. Operand 1024 states and 1438 transitions. [2023-11-06 23:08:46,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2023-11-06 23:08:46,860 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:08:46,861 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:08:46,861 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 23:08:46,861 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:08:46,862 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:08:46,862 INFO L85 PathProgramCache]: Analyzing trace with hash -289684802, now seen corresponding path program 1 times [2023-11-06 23:08:46,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:08:46,863 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [17503449] [2023-11-06 23:08:46,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:08:46,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:08:46,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:47,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:08:47,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:47,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:08:47,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:47,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:08:47,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:47,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-06 23:08:47,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:47,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-06 23:08:47,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:47,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2023-11-06 23:08:47,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:47,164 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 23:08:47,164 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:08:47,164 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [17503449] [2023-11-06 23:08:47,164 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [17503449] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:08:47,165 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:08:47,165 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 23:08:47,165 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [911875572] [2023-11-06 23:08:47,165 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:08:47,167 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 23:08:47,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:08:47,168 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 23:08:47,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:08:47,169 INFO L87 Difference]: Start difference. First operand 1024 states and 1438 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 3 states have internal predecessors, (49), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 23:08:49,315 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:08:49,315 INFO L93 Difference]: Finished difference Result 2419 states and 3389 transitions. [2023-11-06 23:08:49,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 23:08:49,316 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 3 states have internal predecessors, (49), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 70 [2023-11-06 23:08:49,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:08:49,329 INFO L225 Difference]: With dead ends: 2419 [2023-11-06 23:08:49,330 INFO L226 Difference]: Without dead ends: 1422 [2023-11-06 23:08:49,334 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-06 23:08:49,336 INFO L413 NwaCegarLoop]: 723 mSDtfsCounter, 748 mSDsluCounter, 1412 mSDsCounter, 0 mSdLazyCounter, 1040 mSolverCounterSat, 332 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 807 SdHoareTripleChecker+Valid, 2135 SdHoareTripleChecker+Invalid, 1372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 332 IncrementalHoareTripleChecker+Valid, 1040 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2023-11-06 23:08:49,336 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [807 Valid, 2135 Invalid, 1372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [332 Valid, 1040 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2023-11-06 23:08:49,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1422 states. [2023-11-06 23:08:49,480 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1422 to 1339. [2023-11-06 23:08:49,484 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1339 states, 1013 states have (on average 1.3642645607107602) internal successors, (1382), 1018 states have internal predecessors, (1382), 238 states have call successors, (238), 88 states have call predecessors, (238), 87 states have return successors, (237), 236 states have call predecessors, (237), 237 states have call successors, (237) [2023-11-06 23:08:49,495 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1339 states to 1339 states and 1857 transitions. [2023-11-06 23:08:49,496 INFO L78 Accepts]: Start accepts. Automaton has 1339 states and 1857 transitions. Word has length 70 [2023-11-06 23:08:49,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:08:49,496 INFO L495 AbstractCegarLoop]: Abstraction has 1339 states and 1857 transitions. [2023-11-06 23:08:49,497 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 3 states have internal predecessors, (49), 2 states have call successors, (9), 4 states have call predecessors, (9), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 23:08:49,497 INFO L276 IsEmpty]: Start isEmpty. Operand 1339 states and 1857 transitions. [2023-11-06 23:08:49,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2023-11-06 23:08:49,505 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:08:49,505 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:08:49,505 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 23:08:49,506 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:08:49,506 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:08:49,506 INFO L85 PathProgramCache]: Analyzing trace with hash 448086930, now seen corresponding path program 1 times [2023-11-06 23:08:49,506 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:08:49,507 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [749652790] [2023-11-06 23:08:49,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:08:49,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:08:49,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:08:49,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:08:49,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:08:49,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-06 23:08:49,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-06 23:08:49,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 23:08:49,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-06 23:08:49,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-06 23:08:49,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-06 23:08:49,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:49,821 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2023-11-06 23:08:49,821 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:08:49,821 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [749652790] [2023-11-06 23:08:49,822 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [749652790] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:08:49,822 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:08:49,822 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:08:49,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1700213528] [2023-11-06 23:08:49,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:08:49,823 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:08:49,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:08:49,824 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:08:49,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:08:49,824 INFO L87 Difference]: Start difference. First operand 1339 states and 1857 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2023-11-06 23:08:52,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:08:52,069 INFO L93 Difference]: Finished difference Result 1475 states and 2065 transitions. [2023-11-06 23:08:52,076 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 23:08:52,077 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 90 [2023-11-06 23:08:52,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:08:52,091 INFO L225 Difference]: With dead ends: 1475 [2023-11-06 23:08:52,092 INFO L226 Difference]: Without dead ends: 1472 [2023-11-06 23:08:52,093 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 23:08:52,095 INFO L413 NwaCegarLoop]: 549 mSDtfsCounter, 456 mSDsluCounter, 1559 mSDsCounter, 0 mSdLazyCounter, 1084 mSolverCounterSat, 273 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 474 SdHoareTripleChecker+Valid, 2108 SdHoareTripleChecker+Invalid, 1357 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 273 IncrementalHoareTripleChecker+Valid, 1084 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:08:52,095 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [474 Valid, 2108 Invalid, 1357 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [273 Valid, 1084 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2023-11-06 23:08:52,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1472 states. [2023-11-06 23:08:52,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1472 to 1342. [2023-11-06 23:08:52,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1342 states, 1016 states have (on average 1.3631889763779528) internal successors, (1385), 1021 states have internal predecessors, (1385), 238 states have call successors, (238), 88 states have call predecessors, (238), 87 states have return successors, (237), 236 states have call predecessors, (237), 237 states have call successors, (237) [2023-11-06 23:08:52,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1342 states to 1342 states and 1860 transitions. [2023-11-06 23:08:52,216 INFO L78 Accepts]: Start accepts. Automaton has 1342 states and 1860 transitions. Word has length 90 [2023-11-06 23:08:52,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:08:52,219 INFO L495 AbstractCegarLoop]: Abstraction has 1342 states and 1860 transitions. [2023-11-06 23:08:52,221 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 3 states have internal predecessors, (52), 2 states have call successors, (12), 5 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2023-11-06 23:08:52,222 INFO L276 IsEmpty]: Start isEmpty. Operand 1342 states and 1860 transitions. [2023-11-06 23:08:52,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2023-11-06 23:08:52,228 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:08:52,228 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:08:52,228 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 23:08:52,229 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:08:52,229 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:08:52,229 INFO L85 PathProgramCache]: Analyzing trace with hash 1151730535, now seen corresponding path program 1 times [2023-11-06 23:08:52,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:08:52,230 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1206709993] [2023-11-06 23:08:52,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:08:52,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:08:52,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:08:52,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:08:52,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:08:52,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-06 23:08:52,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-06 23:08:52,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 23:08:52,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-06 23:08:52,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-06 23:08:52,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-06 23:08:52,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:52,823 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2023-11-06 23:08:52,828 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:08:52,828 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1206709993] [2023-11-06 23:08:52,829 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1206709993] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:08:52,829 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:08:52,829 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 23:08:52,829 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1604200479] [2023-11-06 23:08:52,829 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:08:52,830 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 23:08:52,830 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:08:52,831 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 23:08:52,831 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-06 23:08:52,831 INFO L87 Difference]: Start difference. First operand 1342 states and 1860 transitions. Second operand has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2023-11-06 23:08:55,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:08:55,121 INFO L93 Difference]: Finished difference Result 2809 states and 3906 transitions. [2023-11-06 23:08:55,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 23:08:55,122 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 92 [2023-11-06 23:08:55,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:08:55,138 INFO L225 Difference]: With dead ends: 2809 [2023-11-06 23:08:55,138 INFO L226 Difference]: Without dead ends: 1497 [2023-11-06 23:08:55,145 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=103, Unknown=0, NotChecked=0, Total=156 [2023-11-06 23:08:55,148 INFO L413 NwaCegarLoop]: 549 mSDtfsCounter, 1092 mSDsluCounter, 1314 mSDsCounter, 0 mSdLazyCounter, 1088 mSolverCounterSat, 484 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1146 SdHoareTripleChecker+Valid, 1863 SdHoareTripleChecker+Invalid, 1572 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 484 IncrementalHoareTripleChecker+Valid, 1088 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:08:55,149 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1146 Valid, 1863 Invalid, 1572 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [484 Valid, 1088 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2023-11-06 23:08:55,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1497 states. [2023-11-06 23:08:55,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1497 to 1367. [2023-11-06 23:08:55,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1367 states, 1032 states have (on average 1.3536821705426356) internal successors, (1397), 1037 states have internal predecessors, (1397), 238 states have call successors, (238), 97 states have call predecessors, (238), 96 states have return successors, (237), 236 states have call predecessors, (237), 237 states have call successors, (237) [2023-11-06 23:08:55,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1367 states to 1367 states and 1872 transitions. [2023-11-06 23:08:55,289 INFO L78 Accepts]: Start accepts. Automaton has 1367 states and 1872 transitions. Word has length 92 [2023-11-06 23:08:55,290 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:08:55,291 INFO L495 AbstractCegarLoop]: Abstraction has 1367 states and 1872 transitions. [2023-11-06 23:08:55,291 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.714285714285714) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2023-11-06 23:08:55,291 INFO L276 IsEmpty]: Start isEmpty. Operand 1367 states and 1872 transitions. [2023-11-06 23:08:55,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2023-11-06 23:08:55,303 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:08:55,303 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:08:55,304 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 23:08:55,304 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:08:55,305 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:08:55,305 INFO L85 PathProgramCache]: Analyzing trace with hash 145080341, now seen corresponding path program 1 times [2023-11-06 23:08:55,305 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:08:55,305 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1595057591] [2023-11-06 23:08:55,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:08:55,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:08:55,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:08:55,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:08:55,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:08:55,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-06 23:08:55,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-06 23:08:55,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 23:08:55,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2023-11-06 23:08:55,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-06 23:08:55,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2023-11-06 23:08:55,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:55,666 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2023-11-06 23:08:55,666 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:08:55,666 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1595057591] [2023-11-06 23:08:55,666 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1595057591] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:08:55,666 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:08:55,667 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 23:08:55,667 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1782866032] [2023-11-06 23:08:55,667 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:08:55,667 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 23:08:55,668 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:08:55,668 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 23:08:55,668 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:08:55,669 INFO L87 Difference]: Start difference. First operand 1367 states and 1872 transitions. Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 3 states have internal predecessors, (64), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-06 23:08:57,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:08:57,182 INFO L93 Difference]: Finished difference Result 2786 states and 3840 transitions. [2023-11-06 23:08:57,183 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 23:08:57,183 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 3 states have internal predecessors, (64), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 102 [2023-11-06 23:08:57,185 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:08:57,197 INFO L225 Difference]: With dead ends: 2786 [2023-11-06 23:08:57,197 INFO L226 Difference]: Without dead ends: 1449 [2023-11-06 23:08:57,202 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 23:08:57,203 INFO L413 NwaCegarLoop]: 581 mSDtfsCounter, 360 mSDsluCounter, 1302 mSDsCounter, 0 mSdLazyCounter, 840 mSolverCounterSat, 259 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 377 SdHoareTripleChecker+Valid, 1883 SdHoareTripleChecker+Invalid, 1099 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 259 IncrementalHoareTripleChecker+Valid, 840 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2023-11-06 23:08:57,203 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [377 Valid, 1883 Invalid, 1099 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [259 Valid, 840 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2023-11-06 23:08:57,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1449 states. [2023-11-06 23:08:57,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1449 to 1369. [2023-11-06 23:08:57,294 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1369 states, 1034 states have (on average 1.351063829787234) internal successors, (1397), 1039 states have internal predecessors, (1397), 238 states have call successors, (238), 97 states have call predecessors, (238), 96 states have return successors, (237), 236 states have call predecessors, (237), 237 states have call successors, (237) [2023-11-06 23:08:57,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1369 states to 1369 states and 1872 transitions. [2023-11-06 23:08:57,305 INFO L78 Accepts]: Start accepts. Automaton has 1369 states and 1872 transitions. Word has length 102 [2023-11-06 23:08:57,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:08:57,307 INFO L495 AbstractCegarLoop]: Abstraction has 1369 states and 1872 transitions. [2023-11-06 23:08:57,308 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 3 states have internal predecessors, (64), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-06 23:08:57,308 INFO L276 IsEmpty]: Start isEmpty. Operand 1369 states and 1872 transitions. [2023-11-06 23:08:57,314 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2023-11-06 23:08:57,314 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:08:57,315 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:08:57,315 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 23:08:57,315 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:08:57,315 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:08:57,316 INFO L85 PathProgramCache]: Analyzing trace with hash -1543863401, now seen corresponding path program 1 times [2023-11-06 23:08:57,316 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:08:57,316 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [659237567] [2023-11-06 23:08:57,316 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:08:57,316 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:08:57,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:08:57,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:08:57,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:08:57,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-06 23:08:57,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-06 23:08:57,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 23:08:57,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2023-11-06 23:08:57,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-06 23:08:57,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2023-11-06 23:08:57,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:08:57,772 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2023-11-06 23:08:57,773 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:08:57,773 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [659237567] [2023-11-06 23:08:57,773 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [659237567] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:08:57,773 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:08:57,773 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:08:57,773 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1335113511] [2023-11-06 23:08:57,774 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:08:57,774 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:08:57,774 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:08:57,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:08:57,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:08:57,775 INFO L87 Difference]: Start difference. First operand 1369 states and 1872 transitions. Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 4 states have internal predecessors, (64), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2023-11-06 23:08:59,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:08:59,571 INFO L93 Difference]: Finished difference Result 1454 states and 2000 transitions. [2023-11-06 23:08:59,571 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 23:08:59,572 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 4 states have internal predecessors, (64), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) Word has length 102 [2023-11-06 23:08:59,572 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:08:59,581 INFO L225 Difference]: With dead ends: 1454 [2023-11-06 23:08:59,581 INFO L226 Difference]: Without dead ends: 1451 [2023-11-06 23:08:59,582 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2023-11-06 23:08:59,583 INFO L413 NwaCegarLoop]: 576 mSDtfsCounter, 335 mSDsluCounter, 1793 mSDsCounter, 0 mSdLazyCounter, 1186 mSolverCounterSat, 250 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 351 SdHoareTripleChecker+Valid, 2369 SdHoareTripleChecker+Invalid, 1436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 250 IncrementalHoareTripleChecker+Valid, 1186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2023-11-06 23:08:59,584 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [351 Valid, 2369 Invalid, 1436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [250 Valid, 1186 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2023-11-06 23:08:59,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1451 states. [2023-11-06 23:08:59,663 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1451 to 1371. [2023-11-06 23:08:59,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1371 states, 1036 states have (on average 1.3503861003861004) internal successors, (1399), 1041 states have internal predecessors, (1399), 238 states have call successors, (238), 97 states have call predecessors, (238), 96 states have return successors, (237), 236 states have call predecessors, (237), 237 states have call successors, (237) [2023-11-06 23:08:59,676 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1371 states to 1371 states and 1874 transitions. [2023-11-06 23:08:59,676 INFO L78 Accepts]: Start accepts. Automaton has 1371 states and 1874 transitions. Word has length 102 [2023-11-06 23:08:59,677 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:08:59,678 INFO L495 AbstractCegarLoop]: Abstraction has 1371 states and 1874 transitions. [2023-11-06 23:08:59,678 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 4 states have internal predecessors, (64), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (9), 1 states have call predecessors, (9), 1 states have call successors, (9) [2023-11-06 23:08:59,678 INFO L276 IsEmpty]: Start isEmpty. Operand 1371 states and 1874 transitions. [2023-11-06 23:08:59,684 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2023-11-06 23:08:59,684 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:08:59,684 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:08:59,685 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 23:08:59,685 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:08:59,685 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:08:59,686 INFO L85 PathProgramCache]: Analyzing trace with hash -561936776, now seen corresponding path program 1 times [2023-11-06 23:08:59,686 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:08:59,686 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [89152708] [2023-11-06 23:08:59,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:08:59,686 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:08:59,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 23:08:59,914 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 23:09:00,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 23:09:00,214 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 23:09:00,214 INFO L360 BasicCegarLoop]: Counterexample is feasible [2023-11-06 23:09:00,215 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 23:09:00,219 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 23:09:00,222 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:09:00,229 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 23:09:00,416 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,418 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,419 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,425 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,425 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,426 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,427 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,427 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,428 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch643 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,435 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,436 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch643 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,436 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,437 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,440 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch493 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,441 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch493 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,441 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch493 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,442 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch493 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:00,472 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:09:00 BoogieIcfgContainer [2023-11-06 23:09:00,472 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 23:09:00,473 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 23:09:00,473 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 23:09:00,473 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 23:09:00,474 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:08:42" (3/4) ... [2023-11-06 23:09:00,476 INFO L140 WitnessPrinter]: No result that supports witness generation found [2023-11-06 23:09:00,477 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 23:09:00,478 INFO L158 Benchmark]: Toolchain (without parser) took 23048.68ms. Allocated memory was 155.2MB in the beginning and 385.9MB in the end (delta: 230.7MB). Free memory was 104.5MB in the beginning and 151.7MB in the end (delta: -47.2MB). Peak memory consumption was 182.8MB. Max. memory is 16.1GB. [2023-11-06 23:09:00,479 INFO L158 Benchmark]: CDTParser took 0.71ms. Allocated memory is still 111.1MB. Free memory was 79.3MB in the beginning and 79.2MB in the end (delta: 97.9kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:09:00,479 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2321.63ms. Allocated memory was 155.2MB in the beginning and 226.5MB in the end (delta: 71.3MB). Free memory was 104.5MB in the beginning and 153.7MB in the end (delta: -49.2MB). Peak memory consumption was 91.7MB. Max. memory is 16.1GB. [2023-11-06 23:09:00,479 INFO L158 Benchmark]: Boogie Procedure Inliner took 220.20ms. Allocated memory is still 226.5MB. Free memory was 153.7MB in the beginning and 141.1MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2023-11-06 23:09:00,480 INFO L158 Benchmark]: Boogie Preprocessor took 231.81ms. Allocated memory is still 226.5MB. Free memory was 141.1MB in the beginning and 130.6MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2023-11-06 23:09:00,481 INFO L158 Benchmark]: RCFGBuilder took 2228.07ms. Allocated memory is still 226.5MB. Free memory was 130.6MB in the beginning and 137.8MB in the end (delta: -7.2MB). Peak memory consumption was 66.2MB. Max. memory is 16.1GB. [2023-11-06 23:09:00,481 INFO L158 Benchmark]: TraceAbstraction took 18030.58ms. Allocated memory was 226.5MB in the beginning and 385.9MB in the end (delta: 159.4MB). Free memory was 137.8MB in the beginning and 152.7MB in the end (delta: -14.9MB). Peak memory consumption was 144.5MB. Max. memory is 16.1GB. [2023-11-06 23:09:00,482 INFO L158 Benchmark]: Witness Printer took 4.73ms. Allocated memory is still 385.9MB. Free memory was 152.7MB in the beginning and 151.7MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:09:00,485 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.71ms. Allocated memory is still 111.1MB. Free memory was 79.3MB in the beginning and 79.2MB in the end (delta: 97.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2321.63ms. Allocated memory was 155.2MB in the beginning and 226.5MB in the end (delta: 71.3MB). Free memory was 104.5MB in the beginning and 153.7MB in the end (delta: -49.2MB). Peak memory consumption was 91.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 220.20ms. Allocated memory is still 226.5MB. Free memory was 153.7MB in the beginning and 141.1MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 231.81ms. Allocated memory is still 226.5MB. Free memory was 141.1MB in the beginning and 130.6MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 2228.07ms. Allocated memory is still 226.5MB. Free memory was 130.6MB in the beginning and 137.8MB in the end (delta: -7.2MB). Peak memory consumption was 66.2MB. Max. memory is 16.1GB. * TraceAbstraction took 18030.58ms. Allocated memory was 226.5MB in the beginning and 385.9MB in the end (delta: 159.4MB). Free memory was 137.8MB in the beginning and 152.7MB in the end (delta: -14.9MB). Peak memory consumption was 144.5MB. Max. memory is 16.1GB. * Witness Printer took 4.73ms. Allocated memory is still 385.9MB. Free memory was 152.7MB in the beginning and 151.7MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 3798]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [3798] - GenericResultAtLocation [Line: 3847]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& current_task)); [3847] - GenericResultAtLocation [Line: 3850]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3850] - GenericResultAtLocation [Line: 3853]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3853] - GenericResultAtLocation [Line: 3856]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3856] - GenericResultAtLocation [Line: 5355]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret), "+m" (tmp___3->state): : "memory", "cc"); [5355-5356] - GenericResultAtLocation [Line: 5360]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret), "+m" (tmp___4->state): : "memory", "cc"); [5360-5361] - GenericResultAtLocation [Line: 5365]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret), "+m" (tmp___5->state): : "memory", "cc"); [5365-5366] - GenericResultAtLocation [Line: 5370]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret), "+m" (tmp___6->state): : "memory", "cc"); [5370-5371] - GenericResultAtLocation [Line: 5454]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret___0), "+m" (tmp___16->state): : "memory", "cc"); [5454-5455] - GenericResultAtLocation [Line: 5459]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret___0), "+m" (tmp___17->state): : "memory", "cc"); [5459-5460] - GenericResultAtLocation [Line: 5464]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret___0), "+m" (tmp___18->state): : "memory", "cc"); [5464-5465] - GenericResultAtLocation [Line: 5469]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret___0), "+m" (tmp___19->state): : "memory", "cc"); [5469-5470] - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch643 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch643 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch640 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch638 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch493 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch493 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch493 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch493 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 3987]: Unable to prove that a call to reach_error is unreachable Unable to prove that a call to reach_error is unreachable Reason: overapproximation of large string literal at line 5883. Possible FailurePath: [L4010] int ldv_irq_1_2 = 0; [L4011] int LDV_IN_INTERRUPT = 1; [L4012] int ldv_irq_1_3 = 0; [L4013] void *ldv_irq_data_1_1 ; [L4014] int ldv_irq_1_1 = 0; [L4015] int ldv_irq_1_0 = 0; [L4016] struct urb *max3421_hcd_desc_group0 ; [L4017] int ldv_irq_line_1_3 ; [L4018] void *ldv_irq_data_1_0 ; [L4019] int ldv_state_variable_0 ; [L4020] struct usb_hcd *max3421_hcd_desc_group1 ; [L4021] int ldv_state_variable_3 ; [L4022] int ldv_irq_line_1_0 ; [L4023] int ldv_state_variable_2 ; [L4024] void *ldv_irq_data_1_3 ; [L4025] struct spi_device *max3421_driver_group0 ; [L4026] int ref_cnt ; [L4027] int ldv_irq_line_1_1 ; [L4028] void *ldv_irq_data_1_2 ; [L4029] int ldv_state_variable_1 ; [L4030] int ldv_irq_line_1_2 ; [L4208] static struct max3421_hcd *max3421_hcd_list ; [L4209-L4213] static int const hrsl_to_error[16U] = { 0, -22, -22, -22, -11, -32, -84, -71, -121, -71, -71, -84, -5, -5, -62, -75}; [L5882-L5888] static struct hc_driver max3421_hcd_desc = {"max3421", "MAX3421 USB Host-Controller Driver", 192UL, 0, 16, & max3421_reset, & max3421_start, 0, 0, & max3421_stop, 0, & max3421_get_frame_number, & max3421_urb_enqueue, & max3421_urb_dequeue, & max3421_map_urb_for_dma, & max3421_unmap_urb_for_dma, & max3421_endpoint_disable, 0, & max3421_hub_status_data, & max3421_hub_control, & max3421_bus_suspend, & max3421_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L6027-L6029] static struct spi_driver max3421_driver = {0, & max3421_probe, & max3421_remove, 0, 0, 0, {"max3421-hcd", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}; [L6045] int ldv_retval_0 ; [L6046] int ldv_retval_1 ; [L6049] int ldv_retval_2 ; [L6545] int ldv_spin = 0; VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6194] char *ldvarg7 ; [L6195] void *tmp ; [L6196] u16 ldvarg3 ; [L6197] u16 tmp___0 ; [L6198] u16 ldvarg0 ; [L6199] u16 tmp___1 ; [L6200] gfp_t ldvarg5 ; [L6201] gfp_t ldvarg6 ; [L6202] struct usb_host_endpoint *ldvarg8 ; [L6203] void *tmp___2 ; [L6204] u16 ldvarg1 ; [L6205] u16 tmp___3 ; [L6206] char *ldvarg4 ; [L6207] void *tmp___4 ; [L6208] int ldvarg9 ; [L6209] int tmp___5 ; [L6210] u16 ldvarg2 ; [L6211] u16 tmp___6 ; [L6212] int tmp___7 ; [L6213] int tmp___8 ; [L6214] int tmp___9 ; [L6215] int tmp___10 ; VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] CALL, EXPR ldv_zalloc(1UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=1, \result={0:0}, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=1] [L6217] RET, EXPR ldv_zalloc(1UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] tmp = ldv_zalloc(1UL) [L6218] ldvarg7 = (char *)tmp [L6219] tmp___0 = __VERIFIER_nondet_u16() [L6220] ldvarg3 = tmp___0 [L6221] tmp___1 = __VERIFIER_nondet_u16() [L6222] ldvarg0 = tmp___1 VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=65452, ldvarg3=65451, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452] [L6223] CALL, EXPR ldv_zalloc(72UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=72, \result={0:0}, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=72, tmp___0=1] [L6223] RET, EXPR ldv_zalloc(72UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(72UL)={0:0}, ldvarg0=65452, ldvarg3=65451, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452] [L6223] tmp___2 = ldv_zalloc(72UL) [L6224] ldvarg8 = (struct usb_host_endpoint *)tmp___2 [L6225] tmp___3 = __VERIFIER_nondet_u16() [L6226] ldvarg1 = tmp___3 VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=65452, ldvarg1=65446, ldvarg3=65451, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452, tmp___2={0:0}, tmp___3=65446] [L6227] CALL, EXPR ldv_zalloc(1UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=1, \result={0:0}, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=1] [L6227] RET, EXPR ldv_zalloc(1UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, ldvarg0=65452, ldvarg1=65446, ldvarg3=65451, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452, tmp___2={0:0}, tmp___3=65446] [L6227] tmp___4 = ldv_zalloc(1UL) [L6228] ldvarg4 = (char *)tmp___4 [L6229] tmp___5 = __VERIFIER_nondet_int() [L6230] ldvarg9 = tmp___5 [L6231] tmp___6 = __VERIFIER_nondet_u16() [L6232] ldvarg2 = tmp___6 [L6233] FCALL ldv_initialize() [L6234] ldvarg5 = (gfp_t)__VERIFIER_nondet_int() [L6235] ldvarg6 = (gfp_t)__VERIFIER_nondet_int() [L6236] ldv_state_variable_1 = 1 [L6237] ref_cnt = 0 [L6238] ldv_state_variable_0 = 1 [L6239] ldv_state_variable_3 = 0 [L6240] ldv_state_variable_2 = 0 VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=65452, ldvarg1=65446, ldvarg2=65447, ldvarg3=65451, ldvarg4={0:0}, ldvarg5=16, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452, tmp___2={0:0}, tmp___3=65446, tmp___4={0:0}, tmp___5=0, tmp___6=65447] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=65452, ldvarg1=65446, ldvarg2=65447, ldvarg3=65451, ldvarg4={0:0}, ldvarg5=16, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452, tmp___2={0:0}, tmp___3=65446, tmp___4={0:0}, tmp___5=0, tmp___6=65447, tmp___7=1] [L6251] COND TRUE ldv_state_variable_0 != 0 [L6252] tmp___8 = __VERIFIER_nondet_int() [L6254] case 0: [L6262] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=65452, ldvarg1=65446, ldvarg2=65447, ldvarg3=65451, ldvarg4={0:0}, ldvarg5=16, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452, tmp___2={0:0}, tmp___3=65446, tmp___4={0:0}, tmp___5=0, tmp___6=65447, tmp___7=1, tmp___8=1] [L6263] COND TRUE ldv_state_variable_0 == 1 [L6264] CALL, EXPR max3421_driver_init() [L6032] int tmp ; [L6034] CALL, EXPR spi_register_driver(& max3421_driver) [L6691] return __VERIFIER_nondet_int(); [L6034] RET, EXPR spi_register_driver(& max3421_driver) [L6034] tmp = spi_register_driver(& max3421_driver) [L6035] return (tmp); VAL [LDV_IN_INTERRUPT=1, \result=0, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp=0] [L6264] RET, EXPR max3421_driver_init() [L6264] ldv_retval_0 = max3421_driver_init() [L6265] COND TRUE ldv_retval_0 == 0 [L6266] ldv_state_variable_0 = 3 [L6267] ldv_state_variable_2 = 1 [L6268] CALL ldv_initialize_spi_driver_2() [L6159] void *tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] CALL, EXPR ldv_zalloc(1496UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=1496, \result={0:0}, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1496, tmp___0=1] [L6161] RET, EXPR ldv_zalloc(1496UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_zalloc(1496UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] tmp = ldv_zalloc(1496UL) [L6162] max3421_driver_group0 = (struct spi_device *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6268] RET ldv_initialize_spi_driver_2() [L6269] ldv_state_variable_3 = 1 [L6270] CALL ldv_initialize_hc_driver_3() [L6122] void *tmp ; [L6123] void *tmp___0 ; VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] CALL, EXPR ldv_zalloc(192UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=192, \result={0:0}, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=192, tmp___0=1] [L6125] RET, EXPR ldv_zalloc(192UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(192UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] tmp = ldv_zalloc(192UL) [L6126] max3421_hcd_desc_group0 = (struct urb *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] CALL, EXPR ldv_zalloc(968UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=968, \result={0:0}, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=968, tmp___0=1] [L6127] RET, EXPR ldv_zalloc(968UL) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(968UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] tmp___0 = ldv_zalloc(968UL) [L6128] max3421_hcd_desc_group1 = (struct usb_hcd *)tmp___0 VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}] [L6270] RET ldv_initialize_hc_driver_3() [L6273] COND FALSE !(ldv_retval_0 != 0) VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=65452, ldvarg1=65446, ldvarg2=65447, ldvarg3=65451, ldvarg4={0:0}, ldvarg5=16, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452, tmp___2={0:0}, tmp___3=65446, tmp___4={0:0}, tmp___5=0, tmp___6=65447, tmp___7=1, tmp___8=1] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: [L6288] case 2: VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=65452, ldvarg1=65446, ldvarg2=65447, ldvarg3=65451, ldvarg4={0:0}, ldvarg5=16, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452, tmp___2={0:0}, tmp___3=65446, tmp___4={0:0}, tmp___5=0, tmp___6=65447, tmp___7=2, tmp___8=1] [L6289] COND TRUE ldv_state_variable_3 != 0 [L6290] tmp___9 = __VERIFIER_nondet_int() [L6292] case 0: [L6303] case 1: [L6315] case 2: [L6327] case 3: [L6339] case 4: [L6351] case 5: [L6363] case 6: [L6375] case 7: [L6387] case 8: [L6395] case 9: [L6407] case 10: VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=65452, ldvarg1=65446, ldvarg2=65447, ldvarg3=65451, ldvarg4={0:0}, ldvarg5=16, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452, tmp___2={0:0}, tmp___3=65446, tmp___4={0:0}, tmp___5=0, tmp___6=65447, tmp___7=2, tmp___8=1, tmp___9=10] [L6408] COND TRUE ldv_state_variable_3 == 1 VAL [LDV_IN_INTERRUPT=1, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=65452, ldvarg1=65446, ldvarg2=65447, ldvarg3=65451, ldvarg4={0:0}, ldvarg5=16, ldvarg6=0, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=65451, tmp___1=65452, tmp___2={0:0}, tmp___3=65446, tmp___4={0:0}, tmp___5=0, tmp___6=65447, tmp___7=2, tmp___8=1, tmp___9=10] [L6409] CALL max3421_urb_enqueue(max3421_hcd_desc_group1, max3421_hcd_desc_group0, ldvarg5) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5535] struct spi_device *spi ; [L5536] struct spi_device *tmp ; [L5537] struct max3421_hcd *max3421_hcd ; [L5538] struct max3421_hcd *tmp___0 ; [L5539] struct max3421_ep *max3421_ep ; [L5540] unsigned long flags ; [L5541] int retval ; [L5542] void *tmp___1 ; [L5544] EXPR hcd->self.controller VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={18446744073709551528:18446744073709551529}, hcd->self.controller={-89:90}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, urb={0:0}, urb={0:0}] [L5544] CALL, EXPR to_spi_device(hcd->self.controller) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, dev={-89:90}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4062] struct device const *__mptr ; [L4063] struct spi_device *tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, dev={-89:90}, dev={-89:90}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4065] COND TRUE (unsigned long )dev != (unsigned long )((struct device *)0) [L4066] __mptr = (struct device const *)dev [L4067] tmp = (struct spi_device *)__mptr VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __mptr={-89:90}, __this_module={18446744073709551528:18446744073709551529}, dev={-89:90}, dev={-89:90}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={-89:90}] [L4071] return (tmp); VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \result={-89:90}, __mptr={-89:90}, __this_module={18446744073709551528:18446744073709551529}, dev={-89:90}, dev={-89:90}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={-89:90}] [L5544] RET, EXPR to_spi_device(hcd->self.controller) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={18446744073709551528:18446744073709551529}, hcd->self.controller={-89:90}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, to_spi_device(hcd->self.controller)={-89:90}, urb={0:0}, urb={0:0}] [L5544] tmp = to_spi_device(hcd->self.controller) [L5545] spi = tmp VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={18446744073709551528:18446744073709551529}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-89:90}, tmp={-89:90}, urb={0:0}, urb={0:0}] [L5546] CALL, EXPR hcd_to_max3421(hcd) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4223] return ((struct max3421_hcd *)(& hcd->hcd_priv)); VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \result={0:899}, __this_module={18446744073709551528:18446744073709551529}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5546] RET, EXPR hcd_to_max3421(hcd) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={18446744073709551528:18446744073709551529}, hcd={0:0}, hcd={0:0}, hcd_to_max3421(hcd)={0:899}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-89:90}, tmp={-89:90}, urb={0:0}, urb={0:0}] [L5546] tmp___0 = hcd_to_max3421(hcd) [L5547] max3421_hcd = tmp___0 [L5548] urb->pipe [L5549] case 1U: VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={18446744073709551528:18446744073709551529}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb->pipe=2147483648, urb={0:0}, urb={0:0}] [L5550] case 0U: VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={18446744073709551528:18446744073709551529}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb->pipe=2147483648, urb={0:0}, urb={0:0}] [L5557] default: VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={18446744073709551528:18446744073709551529}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb->pipe=2147483648, urb={0:0}, urb={0:0}] [L5561] CALL ldv_spin_lock() VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6582] ldv_spin = 1 VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5561] RET ldv_spin_lock() VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={18446744073709551528:18446744073709551529}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-89:90}, tmp={-89:90}, tmp___0={0:899}, urb->pipe=2147483648, urb={0:0}, urb={0:0}] [L5562] EXPR urb->ep [L5562] EXPR (urb->ep)->hcpriv [L5562] max3421_ep = (struct max3421_ep *)(urb->ep)->hcpriv [L5563] COND TRUE (unsigned long )max3421_ep == (unsigned long )((struct max3421_ep *)0) [L5564] CALL kzalloc(40UL, mem_flags) [L6513] CALL ldv_check_alloc_flags(flags) VAL [LDV_IN_INTERRUPT=1, \old(flags)=16, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6549] ldv_spin == 0 || ! (flags & 16U) VAL [LDV_IN_INTERRUPT=1, \old(flags)=16, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, flags=16, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin == 0 || ! (flags & 16U)=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6549] EXPR flags & 16U VAL [LDV_IN_INTERRUPT=1, \old(flags)=16, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, flags & 16U=16, flags=16, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin == 0 || ! (flags & 16U)=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6549] ldv_spin == 0 || ! (flags & 16U) VAL [LDV_IN_INTERRUPT=1, \old(flags)=16, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, flags & 16U=16, flags=16, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin == 0 || ! (flags & 16U)=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6549] COND FALSE !(ldv_spin == 0 || ! (flags & 16U)) [L6551] CALL ldv_error() VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3987] reach_error() VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={18446744073709551528:18446744073709551529}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 37 procedures, 604 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.7s, OverallIterations: 7, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 13.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 5009 SdHoareTripleChecker+Valid, 11.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4769 mSDsluCounter, 12147 SdHoareTripleChecker+Invalid, 10.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 8600 mSDsCounter, 2441 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 6201 IncrementalHoareTripleChecker+Invalid, 8642 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2441 mSolverCounterUnsat, 3547 mSDtfsCounter, 6201 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 153 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1371occurred in iteration=6, InterpolantAutomatonStates: 51, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 6 MinimizatonAttempts, 619 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 618 NumberOfCodeBlocks, 618 NumberOfCodeBlocksAsserted, 7 NumberOfCheckSat, 509 ConstructedInterpolants, 0 QuantifiedInterpolants, 956 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 6 InterpolantComputations, 6 PerfectInterpolantSequences, 276/276 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2023-11-06 23:09:00,529 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 23:09:03,309 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 23:09:03,432 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2023-11-06 23:09:03,438 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 23:09:03,439 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 23:09:03,487 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 23:09:03,487 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 23:09:03,488 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 23:09:03,489 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 23:09:03,490 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 23:09:03,491 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 23:09:03,491 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 23:09:03,492 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 23:09:03,493 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 23:09:03,493 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 23:09:03,494 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 23:09:03,495 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 23:09:03,495 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 23:09:03,496 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 23:09:03,496 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2023-11-06 23:09:03,497 INFO L153 SettingsManager]: * Use bitvectors instead of ints=true [2023-11-06 23:09:03,497 INFO L153 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2023-11-06 23:09:03,498 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 23:09:03,498 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 23:09:03,498 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 23:09:03,499 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 23:09:03,499 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 23:09:03,500 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:09:03,500 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 23:09:03,501 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 23:09:03,501 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 23:09:03,502 INFO L153 SettingsManager]: * Trace refinement strategy=WOLF [2023-11-06 23:09:03,502 INFO L153 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2023-11-06 23:09:03,503 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 23:09:03,503 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 23:09:03,503 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 23:09:03,504 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 23:09:03,504 INFO L153 SettingsManager]: * Logic for external solver=AUFBV [2023-11-06 23:09:03,505 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 23:09:03,505 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 92cb918a49bd861dcff82a05c4e06551bd9d0c0cbb9eb8fadf6410a0f7818165 [2023-11-06 23:09:03,960 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 23:09:03,990 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 23:09:03,997 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 23:09:03,999 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 23:09:03,999 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 23:09:04,002 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2023-11-06 23:09:07,238 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 23:09:07,981 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 23:09:07,982 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2023-11-06 23:09:08,043 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/data/593733878/04f9855fd9c44ca7a9682b1d690f50c3/FLAG9d4690fed [2023-11-06 23:09:08,064 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/data/593733878/04f9855fd9c44ca7a9682b1d690f50c3 [2023-11-06 23:09:08,075 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 23:09:08,078 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 23:09:08,082 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 23:09:08,083 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 23:09:08,088 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 23:09:08,089 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:09:08" (1/1) ... [2023-11-06 23:09:08,090 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3944bc75 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:08, skipping insertion in model container [2023-11-06 23:09:08,091 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:09:08" (1/1) ... [2023-11-06 23:09:08,250 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 23:09:08,859 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2023-11-06 23:09:08,859 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2023-11-06 23:09:09,079 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2023-11-06 23:09:09,886 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:09:09,924 INFO L199 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2023-11-06 23:09:10,003 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 23:09:10,088 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2023-11-06 23:09:10,089 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2023-11-06 23:09:10,107 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2023-11-06 23:09:10,336 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:09:10,360 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 23:09:10,502 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [3714] [2023-11-06 23:09:10,503 WARN L1270 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [3715-3716] [2023-11-06 23:09:10,505 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [3798] [2023-11-06 23:09:10,509 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& current_task)); [3847] [2023-11-06 23:09:10,509 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3850] [2023-11-06 23:09:10,510 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3853] [2023-11-06 23:09:10,510 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3856] [2023-11-06 23:09:10,514 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i[111905,111918] [2023-11-06 23:09:10,610 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret), "+m" (tmp___3->state): : "memory", "cc"); [5355-5356] [2023-11-06 23:09:10,611 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret), "+m" (tmp___4->state): : "memory", "cc"); [5360-5361] [2023-11-06 23:09:10,612 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret), "+m" (tmp___5->state): : "memory", "cc"); [5365-5366] [2023-11-06 23:09:10,612 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret), "+m" (tmp___6->state): : "memory", "cc"); [5370-5371] [2023-11-06 23:09:10,616 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret___0), "+m" (tmp___16->state): : "memory", "cc"); [5454-5455] [2023-11-06 23:09:10,616 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret___0), "+m" (tmp___17->state): : "memory", "cc"); [5459-5460] [2023-11-06 23:09:10,617 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret___0), "+m" (tmp___18->state): : "memory", "cc"); [5464-5465] [2023-11-06 23:09:10,617 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret___0), "+m" (tmp___19->state): : "memory", "cc"); [5469-5470] [2023-11-06 23:09:10,689 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:09:10,751 WARN L672 CHandler]: The function __VERIFIER_nondet_u16 is called, but not defined or handled by StandardFunctionHandler. [2023-11-06 23:09:10,752 WARN L672 CHandler]: The function __xchg_wrong_size is called, but not defined or handled by StandardFunctionHandler. [2023-11-06 23:09:10,752 WARN L672 CHandler]: The function __bad_percpu_size is called, but not defined or handled by StandardFunctionHandler. [2023-11-06 23:09:10,760 INFO L206 MainTranslator]: Completed translation [2023-11-06 23:09:10,761 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10 WrapperNode [2023-11-06 23:09:10,761 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 23:09:10,763 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 23:09:10,763 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 23:09:10,763 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 23:09:10,772 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:10,889 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,023 INFO L138 Inliner]: procedures = 178, calls = 1063, calls flagged for inlining = 81, calls inlined = 52, statements flattened = 1545 [2023-11-06 23:09:11,024 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 23:09:11,026 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 23:09:11,026 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 23:09:11,027 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 23:09:11,037 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,038 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,066 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,071 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,151 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,162 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,173 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,184 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,202 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 23:09:11,203 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 23:09:11,203 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 23:09:11,203 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 23:09:11,204 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (1/1) ... [2023-11-06 23:09:11,221 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:09:11,238 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:09:11,255 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 23:09:11,292 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 23:09:11,305 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2023-11-06 23:09:11,305 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_map_urb_for_dma [2023-11-06 23:09:11,306 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_map_urb_for_dma [2023-11-06 23:09:11,306 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2023-11-06 23:09:11,307 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2023-11-06 23:09:11,308 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2023-11-06 23:09:11,308 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2023-11-06 23:09:11,308 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2023-11-06 23:09:11,310 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2023-11-06 23:09:11,311 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2023-11-06 23:09:11,311 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2023-11-06 23:09:11,311 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2023-11-06 23:09:11,311 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2023-11-06 23:09:11,311 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2023-11-06 23:09:11,311 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2023-11-06 23:09:11,312 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2023-11-06 23:09:11,312 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2023-11-06 23:09:11,312 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2023-11-06 23:09:11,312 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_control [2023-11-06 23:09:11,312 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_control [2023-11-06 23:09:11,312 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_dequeue [2023-11-06 23:09:11,313 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_dequeue [2023-11-06 23:09:11,313 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2023-11-06 23:09:11,313 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2023-11-06 23:09:11,313 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2023-11-06 23:09:11,313 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2023-11-06 23:09:11,313 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_endpoint_disable [2023-11-06 23:09:11,314 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_endpoint_disable [2023-11-06 23:09:11,314 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2023-11-06 23:09:11,314 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2023-11-06 23:09:11,314 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_dev_dbg [2023-11-06 23:09:11,315 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_dev_dbg [2023-11-06 23:09:11,315 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2023-11-06 23:09:11,315 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2023-11-06 23:09:11,315 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u16 [2023-11-06 23:09:11,316 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2023-11-06 23:09:11,316 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2023-11-06 23:09:11,316 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_reset [2023-11-06 23:09:11,316 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_reset [2023-11-06 23:09:11,317 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_urb_enqueue [2023-11-06 23:09:11,317 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_urb_enqueue [2023-11-06 23:09:11,318 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2023-11-06 23:09:11,319 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2023-11-06 23:09:11,319 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-11-06 23:09:11,319 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_resume [2023-11-06 23:09:11,319 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_resume [2023-11-06 23:09:11,319 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 23:09:11,319 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_gpout_set_value [2023-11-06 23:09:11,320 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_gpout_set_value [2023-11-06 23:09:11,320 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-11-06 23:09:11,321 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-11-06 23:09:11,321 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2023-11-06 23:09:11,321 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2023-11-06 23:09:11,321 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2023-11-06 23:09:11,322 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2023-11-06 23:09:11,322 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2023-11-06 23:09:11,322 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2023-11-06 23:09:11,322 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-11-06 23:09:11,322 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2023-11-06 23:09:11,322 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2023-11-06 23:09:11,322 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2023-11-06 23:09:11,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2023-11-06 23:09:11,323 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-06 23:09:11,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2023-11-06 23:09:11,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2023-11-06 23:09:11,324 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_unmap_urb_for_dma [2023-11-06 23:09:11,324 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_unmap_urb_for_dma [2023-11-06 23:09:11,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2023-11-06 23:09:11,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2023-11-06 23:09:11,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2023-11-06 23:09:11,325 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2023-11-06 23:09:11,325 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2023-11-06 23:09:11,325 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2023-11-06 23:09:11,325 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2023-11-06 23:09:11,325 INFO L130 BoogieDeclarations]: Found specification of procedure to_spi_device [2023-11-06 23:09:11,326 INFO L138 BoogieDeclarations]: Found implementation of procedure to_spi_device [2023-11-06 23:09:11,326 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2023-11-06 23:09:11,326 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2023-11-06 23:09:11,326 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_bus_suspend [2023-11-06 23:09:11,326 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_bus_suspend [2023-11-06 23:09:11,326 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_get_frame_number [2023-11-06 23:09:11,326 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_get_frame_number [2023-11-06 23:09:11,327 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2023-11-06 23:09:11,327 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2023-11-06 23:09:11,327 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 23:09:11,327 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 23:09:11,327 INFO L130 BoogieDeclarations]: Found specification of procedure max3421_hub_status_data [2023-11-06 23:09:11,328 INFO L138 BoogieDeclarations]: Found implementation of procedure max3421_hub_status_data [2023-11-06 23:09:11,328 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_max3421 [2023-11-06 23:09:11,328 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_max3421 [2023-11-06 23:09:11,328 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2023-11-06 23:09:11,328 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2023-11-06 23:09:11,792 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 23:09:11,795 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 23:09:12,055 INFO L771 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2023-11-06 23:09:20,221 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 23:09:20,245 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 23:09:20,245 INFO L302 CfgBuilder]: Removed 0 assume(true) statements. [2023-11-06 23:09:20,251 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:09:20 BoogieIcfgContainer [2023-11-06 23:09:20,251 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 23:09:20,255 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 23:09:20,255 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 23:09:20,259 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 23:09:20,259 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 11:09:08" (1/3) ... [2023-11-06 23:09:20,261 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8ff82b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:09:20, skipping insertion in model container [2023-11-06 23:09:20,262 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:09:10" (2/3) ... [2023-11-06 23:09:20,262 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8ff82b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:09:20, skipping insertion in model container [2023-11-06 23:09:20,262 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:09:20" (3/3) ... [2023-11-06 23:09:20,264 INFO L112 eAbstractionObserver]: Analyzing ICFG 43_2a_bitvector_linux-3.16-rc1.tar.xz-43_2a-drivers--usb--host--max3421-hcd.ko-entry_point.cil.out.i [2023-11-06 23:09:20,286 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 23:09:20,286 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 23:09:20,385 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 23:09:20,393 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1b6f328b, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 23:09:20,393 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 23:09:20,401 INFO L276 IsEmpty]: Start isEmpty. Operand has 570 states, 414 states have (on average 1.3623188405797102) internal successors, (564), 424 states have internal predecessors, (564), 119 states have call successors, (119), 36 states have call predecessors, (119), 35 states have return successors, (113), 113 states have call predecessors, (113), 113 states have call successors, (113) [2023-11-06 23:09:20,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-11-06 23:09:20,426 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:09:20,427 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:09:20,428 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:09:20,433 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:09:20,434 INFO L85 PathProgramCache]: Analyzing trace with hash -955408484, now seen corresponding path program 1 times [2023-11-06 23:09:20,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2023-11-06 23:09:20,452 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1701664721] [2023-11-06 23:09:20,453 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:09:20,453 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:20,454 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat [2023-11-06 23:09:20,459 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-06 23:09:20,481 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2023-11-06 23:09:21,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:09:21,156 INFO L262 TraceCheckSpWp]: Trace formula consists of 652 conjuncts, 2 conjunts are in the unsatisfiable core [2023-11-06 23:09:21,165 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:09:21,228 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 23:09:21,228 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 23:09:21,229 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2023-11-06 23:09:21,229 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1701664721] [2023-11-06 23:09:21,230 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1701664721] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:09:21,230 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:09:21,231 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:09:21,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [960615819] [2023-11-06 23:09:21,234 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:09:21,238 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:09:21,239 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2023-11-06 23:09:21,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:09:21,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:09:21,275 INFO L87 Difference]: Start difference. First operand has 570 states, 414 states have (on average 1.3623188405797102) internal successors, (564), 424 states have internal predecessors, (564), 119 states have call successors, (119), 36 states have call predecessors, (119), 35 states have return successors, (113), 113 states have call predecessors, (113), 113 states have call successors, (113) Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 23:09:21,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:09:21,532 INFO L93 Difference]: Finished difference Result 1559 states and 2199 transitions. [2023-11-06 23:09:21,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:09:21,536 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 58 [2023-11-06 23:09:21,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:09:21,559 INFO L225 Difference]: With dead ends: 1559 [2023-11-06 23:09:21,559 INFO L226 Difference]: Without dead ends: 961 [2023-11-06 23:09:21,569 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 57 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:09:21,573 INFO L413 NwaCegarLoop]: 793 mSDtfsCounter, 588 mSDsluCounter, 771 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 588 SdHoareTripleChecker+Valid, 1564 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:09:21,574 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [588 Valid, 1564 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:09:21,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 961 states. [2023-11-06 23:09:21,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 961 to 958. [2023-11-06 23:09:21,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 958 states, 703 states have (on average 1.3499288762446657) internal successors, (949), 706 states have internal predecessors, (949), 190 states have call successors, (190), 65 states have call predecessors, (190), 64 states have return successors, (189), 189 states have call predecessors, (189), 189 states have call successors, (189) [2023-11-06 23:09:21,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 958 states to 958 states and 1328 transitions. [2023-11-06 23:09:21,753 INFO L78 Accepts]: Start accepts. Automaton has 958 states and 1328 transitions. Word has length 58 [2023-11-06 23:09:21,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:09:21,754 INFO L495 AbstractCegarLoop]: Abstraction has 958 states and 1328 transitions. [2023-11-06 23:09:21,754 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 23:09:21,754 INFO L276 IsEmpty]: Start isEmpty. Operand 958 states and 1328 transitions. [2023-11-06 23:09:21,762 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2023-11-06 23:09:21,762 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:09:21,762 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:09:21,793 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2023-11-06 23:09:21,984 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:21,984 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:09:21,985 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:09:21,985 INFO L85 PathProgramCache]: Analyzing trace with hash -2039809494, now seen corresponding path program 1 times [2023-11-06 23:09:21,986 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2023-11-06 23:09:21,986 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1478117141] [2023-11-06 23:09:21,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:09:21,987 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:21,987 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat [2023-11-06 23:09:21,988 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-06 23:09:21,993 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2023-11-06 23:09:22,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:09:22,557 INFO L262 TraceCheckSpWp]: Trace formula consists of 623 conjuncts, 2 conjunts are in the unsatisfiable core [2023-11-06 23:09:22,561 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:09:22,597 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2023-11-06 23:09:22,598 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 23:09:22,598 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2023-11-06 23:09:22,598 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1478117141] [2023-11-06 23:09:22,599 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1478117141] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:09:22,599 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:09:22,599 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:09:22,599 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1865288769] [2023-11-06 23:09:22,600 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:09:22,601 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:09:22,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2023-11-06 23:09:22,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:09:22,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:09:22,603 INFO L87 Difference]: Start difference. First operand 958 states and 1328 transitions. Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 23:09:22,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:09:22,924 INFO L93 Difference]: Finished difference Result 2205 states and 3042 transitions. [2023-11-06 23:09:22,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:09:22,925 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 69 [2023-11-06 23:09:22,925 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:09:22,936 INFO L225 Difference]: With dead ends: 2205 [2023-11-06 23:09:22,937 INFO L226 Difference]: Without dead ends: 1274 [2023-11-06 23:09:22,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:09:22,942 INFO L413 NwaCegarLoop]: 886 mSDtfsCounter, 326 mSDsluCounter, 681 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 326 SdHoareTripleChecker+Valid, 1567 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:09:22,943 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [326 Valid, 1567 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:09:22,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1274 states. [2023-11-06 23:09:23,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1274 to 1269. [2023-11-06 23:09:23,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1269 states, 943 states have (on average 1.3414634146341464) internal successors, (1265), 948 states have internal predecessors, (1265), 238 states have call successors, (238), 88 states have call predecessors, (238), 87 states have return successors, (237), 236 states have call predecessors, (237), 237 states have call successors, (237) [2023-11-06 23:09:23,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1269 states to 1269 states and 1740 transitions. [2023-11-06 23:09:23,062 INFO L78 Accepts]: Start accepts. Automaton has 1269 states and 1740 transitions. Word has length 69 [2023-11-06 23:09:23,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:09:23,063 INFO L495 AbstractCegarLoop]: Abstraction has 1269 states and 1740 transitions. [2023-11-06 23:09:23,063 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 23:09:23,063 INFO L276 IsEmpty]: Start isEmpty. Operand 1269 states and 1740 transitions. [2023-11-06 23:09:23,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2023-11-06 23:09:23,069 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:09:23,070 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:09:23,096 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2023-11-06 23:09:23,291 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:23,291 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:09:23,292 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:09:23,292 INFO L85 PathProgramCache]: Analyzing trace with hash 1183715627, now seen corresponding path program 1 times [2023-11-06 23:09:23,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2023-11-06 23:09:23,294 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1328362060] [2023-11-06 23:09:23,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:09:23,294 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:23,294 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat [2023-11-06 23:09:23,297 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-06 23:09:23,298 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2023-11-06 23:09:23,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:09:23,938 INFO L262 TraceCheckSpWp]: Trace formula consists of 730 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 23:09:23,948 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:09:24,119 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2023-11-06 23:09:24,119 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 23:09:24,119 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2023-11-06 23:09:24,120 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1328362060] [2023-11-06 23:09:24,120 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1328362060] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:09:24,120 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:09:24,120 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:09:24,121 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2106019082] [2023-11-06 23:09:24,121 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:09:24,122 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:09:24,122 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2023-11-06 23:09:24,123 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:09:24,123 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:09:24,123 INFO L87 Difference]: Start difference. First operand 1269 states and 1740 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-06 23:09:24,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:09:24,474 INFO L93 Difference]: Finished difference Result 2945 states and 4137 transitions. [2023-11-06 23:09:24,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 23:09:24,477 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) Word has length 89 [2023-11-06 23:09:24,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:09:24,492 INFO L225 Difference]: With dead ends: 2945 [2023-11-06 23:09:24,492 INFO L226 Difference]: Without dead ends: 1706 [2023-11-06 23:09:24,498 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2023-11-06 23:09:24,499 INFO L413 NwaCegarLoop]: 1043 mSDtfsCounter, 225 mSDsluCounter, 3899 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 264 SdHoareTripleChecker+Valid, 4942 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:09:24,499 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [264 Valid, 4942 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:09:24,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1706 states. [2023-11-06 23:09:24,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1706 to 1285. [2023-11-06 23:09:24,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1285 states, 955 states have (on average 1.33717277486911) internal successors, (1277), 960 states have internal predecessors, (1277), 240 states have call successors, (240), 88 states have call predecessors, (240), 89 states have return successors, (245), 240 states have call predecessors, (245), 239 states have call successors, (245) [2023-11-06 23:09:24,608 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1285 states to 1285 states and 1762 transitions. [2023-11-06 23:09:24,609 INFO L78 Accepts]: Start accepts. Automaton has 1285 states and 1762 transitions. Word has length 89 [2023-11-06 23:09:24,610 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:09:24,610 INFO L495 AbstractCegarLoop]: Abstraction has 1285 states and 1762 transitions. [2023-11-06 23:09:24,611 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (12), 2 states have call predecessors, (12), 3 states have return successors, (9), 3 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-06 23:09:24,611 INFO L276 IsEmpty]: Start isEmpty. Operand 1285 states and 1762 transitions. [2023-11-06 23:09:24,616 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2023-11-06 23:09:24,617 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:09:24,617 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:09:24,644 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2023-11-06 23:09:24,834 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:24,835 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:09:24,835 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:09:24,835 INFO L85 PathProgramCache]: Analyzing trace with hash -306286464, now seen corresponding path program 1 times [2023-11-06 23:09:24,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2023-11-06 23:09:24,837 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1365797908] [2023-11-06 23:09:24,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:09:24,838 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:24,838 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat [2023-11-06 23:09:24,839 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-06 23:09:24,882 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2023-11-06 23:09:25,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:09:25,447 INFO L262 TraceCheckSpWp]: Trace formula consists of 700 conjuncts, 3 conjunts are in the unsatisfiable core [2023-11-06 23:09:25,452 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:09:25,475 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 63 trivial. 0 not checked. [2023-11-06 23:09:25,475 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 23:09:25,475 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2023-11-06 23:09:25,475 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1365797908] [2023-11-06 23:09:25,476 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1365797908] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:09:25,476 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:09:25,476 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:09:25,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [606290960] [2023-11-06 23:09:25,476 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:09:25,477 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:09:25,477 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2023-11-06 23:09:25,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:09:25,478 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:09:25,478 INFO L87 Difference]: Start difference. First operand 1285 states and 1762 transitions. Second operand has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-06 23:09:25,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:09:25,603 INFO L93 Difference]: Finished difference Result 2544 states and 3500 transitions. [2023-11-06 23:09:25,604 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:09:25,604 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 99 [2023-11-06 23:09:25,605 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:09:25,614 INFO L225 Difference]: With dead ends: 2544 [2023-11-06 23:09:25,615 INFO L226 Difference]: Without dead ends: 1289 [2023-11-06 23:09:25,620 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 97 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:09:25,621 INFO L413 NwaCegarLoop]: 764 mSDtfsCounter, 19 mSDsluCounter, 735 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 1499 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:09:25,621 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 1499 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:09:25,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1289 states. [2023-11-06 23:09:25,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1289 to 1287. [2023-11-06 23:09:25,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1287 states, 957 states have (on average 1.334378265412748) internal successors, (1277), 962 states have internal predecessors, (1277), 240 states have call successors, (240), 88 states have call predecessors, (240), 89 states have return successors, (245), 240 states have call predecessors, (245), 239 states have call successors, (245) [2023-11-06 23:09:25,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1287 states to 1287 states and 1762 transitions. [2023-11-06 23:09:25,719 INFO L78 Accepts]: Start accepts. Automaton has 1287 states and 1762 transitions. Word has length 99 [2023-11-06 23:09:25,722 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:09:25,722 INFO L495 AbstractCegarLoop]: Abstraction has 1287 states and 1762 transitions. [2023-11-06 23:09:25,723 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-06 23:09:25,723 INFO L276 IsEmpty]: Start isEmpty. Operand 1287 states and 1762 transitions. [2023-11-06 23:09:25,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2023-11-06 23:09:25,734 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:09:25,734 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:09:25,759 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2023-11-06 23:09:25,954 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:25,955 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:09:25,955 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:09:25,955 INFO L85 PathProgramCache]: Analyzing trace with hash -1327354818, now seen corresponding path program 1 times [2023-11-06 23:09:25,956 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2023-11-06 23:09:25,956 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [528338329] [2023-11-06 23:09:25,956 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:09:25,956 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:25,957 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat [2023-11-06 23:09:25,958 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-06 23:09:26,000 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2023-11-06 23:09:26,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 23:09:26,667 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 23:09:27,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 23:09:27,449 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2023-11-06 23:09:27,449 INFO L360 BasicCegarLoop]: Counterexample is feasible [2023-11-06 23:09:27,450 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 23:09:27,480 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2023-11-06 23:09:27,679 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-06 23:09:27,682 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1] [2023-11-06 23:09:27,687 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 23:09:27,831 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,837 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,839 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,847 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,848 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,848 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,848 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,855 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch564 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,856 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,856 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,857 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch564 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,857 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,857 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,865 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch425 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,866 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch425 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,866 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch425 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,867 WARN L1553 BoogieBacktranslator]: Unfinished Backtranslation: Expression #t~switch425 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement [2023-11-06 23:09:27,903 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:09:27 BoogieIcfgContainer [2023-11-06 23:09:27,903 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 23:09:27,904 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 23:09:27,905 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 23:09:27,905 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 23:09:27,906 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:09:20" (3/4) ... [2023-11-06 23:09:27,908 INFO L140 WitnessPrinter]: No result that supports witness generation found [2023-11-06 23:09:27,909 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 23:09:27,910 INFO L158 Benchmark]: Toolchain (without parser) took 19832.57ms. Allocated memory was 98.6MB in the beginning and 218.1MB in the end (delta: 119.5MB). Free memory was 67.3MB in the beginning and 77.3MB in the end (delta: -9.9MB). Peak memory consumption was 110.2MB. Max. memory is 16.1GB. [2023-11-06 23:09:27,911 INFO L158 Benchmark]: CDTParser took 0.41ms. Allocated memory is still 60.8MB. Free memory was 37.3MB in the beginning and 37.2MB in the end (delta: 92.2kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:09:27,911 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2679.70ms. Allocated memory was 98.6MB in the beginning and 134.2MB in the end (delta: 35.7MB). Free memory was 67.1MB in the beginning and 51.8MB in the end (delta: 15.3MB). Peak memory consumption was 56.0MB. Max. memory is 16.1GB. [2023-11-06 23:09:27,912 INFO L158 Benchmark]: Boogie Procedure Inliner took 261.73ms. Allocated memory is still 134.2MB. Free memory was 51.8MB in the beginning and 74.2MB in the end (delta: -22.4MB). Peak memory consumption was 11.2MB. Max. memory is 16.1GB. [2023-11-06 23:09:27,912 INFO L158 Benchmark]: Boogie Preprocessor took 176.39ms. Allocated memory is still 134.2MB. Free memory was 74.2MB in the beginning and 62.9MB in the end (delta: 11.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2023-11-06 23:09:27,913 INFO L158 Benchmark]: RCFGBuilder took 9048.03ms. Allocated memory was 134.2MB in the beginning and 180.4MB in the end (delta: 46.1MB). Free memory was 62.9MB in the beginning and 96.3MB in the end (delta: -33.4MB). Peak memory consumption was 47.0MB. Max. memory is 16.1GB. [2023-11-06 23:09:27,914 INFO L158 Benchmark]: TraceAbstraction took 7648.20ms. Allocated memory was 180.4MB in the beginning and 218.1MB in the end (delta: 37.7MB). Free memory was 95.3MB in the beginning and 77.3MB in the end (delta: 18.0MB). Peak memory consumption was 54.7MB. Max. memory is 16.1GB. [2023-11-06 23:09:27,914 INFO L158 Benchmark]: Witness Printer took 5.08ms. Allocated memory is still 218.1MB. Free memory is still 77.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:09:27,918 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.41ms. Allocated memory is still 60.8MB. Free memory was 37.3MB in the beginning and 37.2MB in the end (delta: 92.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2679.70ms. Allocated memory was 98.6MB in the beginning and 134.2MB in the end (delta: 35.7MB). Free memory was 67.1MB in the beginning and 51.8MB in the end (delta: 15.3MB). Peak memory consumption was 56.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 261.73ms. Allocated memory is still 134.2MB. Free memory was 51.8MB in the beginning and 74.2MB in the end (delta: -22.4MB). Peak memory consumption was 11.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 176.39ms. Allocated memory is still 134.2MB. Free memory was 74.2MB in the beginning and 62.9MB in the end (delta: 11.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * RCFGBuilder took 9048.03ms. Allocated memory was 134.2MB in the beginning and 180.4MB in the end (delta: 46.1MB). Free memory was 62.9MB in the beginning and 96.3MB in the end (delta: -33.4MB). Peak memory consumption was 47.0MB. Max. memory is 16.1GB. * TraceAbstraction took 7648.20ms. Allocated memory was 180.4MB in the beginning and 218.1MB in the end (delta: 37.7MB). Free memory was 95.3MB in the beginning and 77.3MB in the end (delta: 18.0MB). Peak memory consumption was 54.7MB. Max. memory is 16.1GB. * Witness Printer took 5.08ms. Allocated memory is still 218.1MB. Free memory is still 77.3MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 3798]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [3798] - GenericResultAtLocation [Line: 3847]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& current_task)); [3847] - GenericResultAtLocation [Line: 3850]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3850] - GenericResultAtLocation [Line: 3853]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3853] - GenericResultAtLocation [Line: 3856]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3856] - GenericResultAtLocation [Line: 5355]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret), "+m" (tmp___3->state): : "memory", "cc"); [5355-5356] - GenericResultAtLocation [Line: 5360]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret), "+m" (tmp___4->state): : "memory", "cc"); [5360-5361] - GenericResultAtLocation [Line: 5365]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret), "+m" (tmp___5->state): : "memory", "cc"); [5365-5366] - GenericResultAtLocation [Line: 5370]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret), "+m" (tmp___6->state): : "memory", "cc"); [5370-5371] - GenericResultAtLocation [Line: 5454]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret___0), "+m" (tmp___16->state): : "memory", "cc"); [5454-5455] - GenericResultAtLocation [Line: 5459]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret___0), "+m" (tmp___17->state): : "memory", "cc"); [5459-5460] - GenericResultAtLocation [Line: 5464]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret___0), "+m" (tmp___18->state): : "memory", "cc"); [5464-5465] - GenericResultAtLocation [Line: 5469]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret___0), "+m" (tmp___19->state): : "memory", "cc"); [5469-5470] - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch564 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch564 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch561 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch559 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch425 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch425 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch425 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Expression #t~switch425 has a C AST node but it is no IASTExpression: class org.eclipse.cdt.internal.core.dom.parser.c.CASTSwitchStatement - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 3987]: Unable to prove that a call to reach_error is unreachable Unable to prove that a call to reach_error is unreachable Reason: overapproximation of large string literal at line 5883. Possible FailurePath: [L4010] int ldv_irq_1_2 = 0; [L4011] int LDV_IN_INTERRUPT = 1; [L4012] int ldv_irq_1_3 = 0; [L4013] void *ldv_irq_data_1_1 ; [L4014] int ldv_irq_1_1 = 0; [L4015] int ldv_irq_1_0 = 0; [L4016] struct urb *max3421_hcd_desc_group0 ; [L4017] int ldv_irq_line_1_3 ; [L4018] void *ldv_irq_data_1_0 ; [L4019] int ldv_state_variable_0 ; [L4020] struct usb_hcd *max3421_hcd_desc_group1 ; [L4021] int ldv_state_variable_3 ; [L4022] int ldv_irq_line_1_0 ; [L4023] int ldv_state_variable_2 ; [L4024] void *ldv_irq_data_1_3 ; [L4025] struct spi_device *max3421_driver_group0 ; [L4026] int ref_cnt ; [L4027] int ldv_irq_line_1_1 ; [L4028] void *ldv_irq_data_1_2 ; [L4029] int ldv_state_variable_1 ; [L4030] int ldv_irq_line_1_2 ; [L4208] static struct max3421_hcd *max3421_hcd_list ; [L4209-L4213] static int const hrsl_to_error[16U] = { 0, -22, -22, -22, -11, -32, -84, -71, -121, -71, -71, -84, -5, -5, -62, -75}; [L5882-L5888] static struct hc_driver max3421_hcd_desc = {"max3421", "MAX3421 USB Host-Controller Driver", 192UL, 0, 16, & max3421_reset, & max3421_start, 0, 0, & max3421_stop, 0, & max3421_get_frame_number, & max3421_urb_enqueue, & max3421_urb_dequeue, & max3421_map_urb_for_dma, & max3421_unmap_urb_for_dma, & max3421_endpoint_disable, 0, & max3421_hub_status_data, & max3421_hub_control, & max3421_bus_suspend, & max3421_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L6027-L6029] static struct spi_driver max3421_driver = {0, & max3421_probe, & max3421_remove, 0, 0, 0, {"max3421-hcd", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}; [L6045] int ldv_retval_0 ; [L6046] int ldv_retval_1 ; [L6049] int ldv_retval_2 ; [L6545] int ldv_spin = 0; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6194] char *ldvarg7 ; [L6195] void *tmp ; [L6196] u16 ldvarg3 ; [L6197] u16 tmp___0 ; [L6198] u16 ldvarg0 ; [L6199] u16 tmp___1 ; [L6200] gfp_t ldvarg5 ; [L6201] gfp_t ldvarg6 ; [L6202] struct usb_host_endpoint *ldvarg8 ; [L6203] void *tmp___2 ; [L6204] u16 ldvarg1 ; [L6205] u16 tmp___3 ; [L6206] char *ldvarg4 ; [L6207] void *tmp___4 ; [L6208] int ldvarg9 ; [L6209] int tmp___5 ; [L6210] u16 ldvarg2 ; [L6211] u16 tmp___6 ; [L6212] int tmp___7 ; [L6213] int tmp___8 ; [L6214] int tmp___9 ; [L6215] int tmp___10 ; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] CALL, EXPR ldv_zalloc(1UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=1, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=2] [L6217] RET, EXPR ldv_zalloc(1UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6217] tmp = ldv_zalloc(1UL) [L6218] ldvarg7 = (char *)tmp [L6219] tmp___0 = __VERIFIER_nondet_u16() [L6220] ldvarg3 = tmp___0 [L6221] tmp___1 = __VERIFIER_nondet_u16() [L6222] ldvarg0 = tmp___1 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=1, ldvarg3=2, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1] [L6223] CALL, EXPR ldv_zalloc(72UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=72, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=72, tmp___0=2] [L6223] RET, EXPR ldv_zalloc(72UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(72UL)={0:0}, ldvarg0=1, ldvarg3=2, ldvarg7={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1] [L6223] tmp___2 = ldv_zalloc(72UL) [L6224] ldvarg8 = (struct usb_host_endpoint *)tmp___2 [L6225] tmp___3 = __VERIFIER_nondet_u16() [L6226] ldvarg1 = tmp___3 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=1, ldvarg1=3, ldvarg3=2, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2={0:0}, tmp___3=3] [L6227] CALL, EXPR ldv_zalloc(1UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=1, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1, tmp___0=2] [L6227] RET, EXPR ldv_zalloc(1UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_zalloc(1UL)={0:0}, ldvarg0=1, ldvarg1=3, ldvarg3=2, ldvarg7={0:0}, ldvarg8={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2={0:0}, tmp___3=3] [L6227] tmp___4 = ldv_zalloc(1UL) [L6228] ldvarg4 = (char *)tmp___4 [L6229] tmp___5 = __VERIFIER_nondet_int() [L6230] ldvarg9 = tmp___5 [L6231] tmp___6 = __VERIFIER_nondet_u16() [L6232] ldvarg2 = tmp___6 [L6233] FCALL ldv_initialize() [L6234] ldvarg5 = (gfp_t)__VERIFIER_nondet_int() [L6235] ldvarg6 = (gfp_t)__VERIFIER_nondet_int() [L6236] ldv_state_variable_1 = 1 [L6237] ref_cnt = 0 [L6238] ldv_state_variable_0 = 1 [L6239] ldv_state_variable_3 = 0 [L6240] ldv_state_variable_2 = 0 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=1, ldvarg1=3, ldvarg2=11, ldvarg3=2, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2={0:0}, tmp___3=3, tmp___4={0:0}, tmp___5=11, tmp___6=11] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=1, ldvarg1=3, ldvarg2=11, ldvarg3=2, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2={0:0}, tmp___3=3, tmp___4={0:0}, tmp___5=11, tmp___6=11, tmp___7=1] [L6251] COND TRUE ldv_state_variable_0 != 0 [L6252] tmp___8 = __VERIFIER_nondet_int() [L6254] case 0: [L6262] case 1: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, ldvarg0=1, ldvarg1=3, ldvarg2=11, ldvarg3=2, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2={0:0}, tmp___3=3, tmp___4={0:0}, tmp___5=11, tmp___6=11, tmp___7=1, tmp___8=1] [L6263] COND TRUE ldv_state_variable_0 == 1 [L6264] CALL, EXPR max3421_driver_init() [L6032] int tmp ; [L6034] CALL, EXPR spi_register_driver(& max3421_driver) [L6691] return __VERIFIER_nondet_int(); [L6034] RET, EXPR spi_register_driver(& max3421_driver) [L6034] tmp = spi_register_driver(& max3421_driver) [L6035] return (tmp); VAL [LDV_IN_INTERRUPT=1, \result=0, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp=0] [L6264] RET, EXPR max3421_driver_init() [L6264] ldv_retval_0 = max3421_driver_init() [L6265] COND TRUE ldv_retval_0 == 0 [L6266] ldv_state_variable_0 = 3 [L6267] ldv_state_variable_2 = 1 [L6268] CALL ldv_initialize_spi_driver_2() [L6159] void *tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] CALL, EXPR ldv_zalloc(1496UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=1496, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=1496, tmp___0=2] [L6161] RET, EXPR ldv_zalloc(1496UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, ldv_zalloc(1496UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6161] tmp = ldv_zalloc(1496UL) [L6162] max3421_driver_group0 = (struct spi_device *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=0, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6268] RET ldv_initialize_spi_driver_2() [L6269] ldv_state_variable_3 = 1 [L6270] CALL ldv_initialize_hc_driver_3() [L6122] void *tmp ; [L6123] void *tmp___0 ; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] CALL, EXPR ldv_zalloc(192UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=192, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=192, tmp___0=2] [L6125] RET, EXPR ldv_zalloc(192UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(192UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6125] tmp = ldv_zalloc(192UL) [L6126] max3421_hcd_desc_group0 = (struct urb *)tmp VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] CALL, EXPR ldv_zalloc(968UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3951] void *p ; [L3952] void *tmp ; [L3953] int tmp___0 ; [L3955] tmp___0 = __VERIFIER_nondet_int() [L3956] COND TRUE tmp___0 != 0 [L3957] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=968, \result={0:0}, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, size=968, tmp___0=2] [L6127] RET, EXPR ldv_zalloc(968UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_zalloc(968UL)={0:0}, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}] [L6127] tmp___0 = ldv_zalloc(968UL) [L6128] max3421_hcd_desc_group1 = (struct usb_hcd *)tmp___0 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}] [L6270] RET ldv_initialize_hc_driver_3() [L6273] COND FALSE !(ldv_retval_0 != 0) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=1, ldvarg1=3, ldvarg2=11, ldvarg3=2, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2={0:0}, tmp___3=3, tmp___4={0:0}, tmp___5=11, tmp___6=11, tmp___7=1, tmp___8=1] [L6242] tmp___7 = __VERIFIER_nondet_int() [L6244] case 0: [L6250] case 1: [L6288] case 2: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=1, ldvarg1=3, ldvarg2=11, ldvarg3=2, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2={0:0}, tmp___3=3, tmp___4={0:0}, tmp___5=11, tmp___6=11, tmp___7=2, tmp___8=1] [L6289] COND TRUE ldv_state_variable_3 != 0 [L6290] tmp___9 = __VERIFIER_nondet_int() [L6292] case 0: [L6303] case 1: [L6315] case 2: [L6327] case 3: [L6339] case 4: [L6351] case 5: [L6363] case 6: [L6375] case 7: [L6387] case 8: [L6395] case 9: [L6407] case 10: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=1, ldvarg1=3, ldvarg2=11, ldvarg3=2, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2={0:0}, tmp___3=3, tmp___4={0:0}, tmp___5=11, tmp___6=11, tmp___7=2, tmp___8=1, tmp___9=10] [L6408] COND TRUE ldv_state_variable_3 == 1 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldvarg0=1, ldvarg1=3, ldvarg2=11, ldvarg3=2, ldvarg4={0:0}, ldvarg7={0:0}, ldvarg8={0:0}, ldvarg9=11, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={0:0}, tmp___0=2, tmp___1=1, tmp___2={0:0}, tmp___3=3, tmp___4={0:0}, tmp___5=11, tmp___6=11, tmp___7=2, tmp___8=1, tmp___9=10] [L6409] CALL max3421_urb_enqueue(max3421_hcd_desc_group1, max3421_hcd_desc_group0, ldvarg5) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5535] struct spi_device *spi ; [L5536] struct spi_device *tmp ; [L5537] struct max3421_hcd *max3421_hcd ; [L5538] struct max3421_hcd *tmp___0 ; [L5539] struct max3421_ep *max3421_ep ; [L5540] unsigned long flags ; [L5541] int retval ; [L5542] void *tmp___1 ; [L5544] EXPR hcd->self.controller VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd->self.controller={-9223372036854775808:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, urb={0:0}, urb={0:0}] [L5544] CALL, EXPR to_spi_device(hcd->self.controller) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={0:0}, dev={-9223372036854775808:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4062] struct device const *__mptr ; [L4063] struct spi_device *tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={0:0}, dev={-9223372036854775808:0}, dev={-9223372036854775808:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4065] COND TRUE (unsigned long )dev != (unsigned long )((struct device *)0) [L4066] __mptr = (struct device const *)dev [L4067] tmp = (struct spi_device *)__mptr VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __mptr={-9223372036854775808:0}, __this_module={0:0}, dev={-9223372036854775808:0}, dev={-9223372036854775808:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={-9223372036854775808:0}] [L4071] return (tmp); VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \result={-9223372036854775808:0}, __mptr={-9223372036854775808:0}, __this_module={0:0}, dev={-9223372036854775808:0}, dev={-9223372036854775808:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0, tmp={-9223372036854775808:0}] [L5544] RET, EXPR to_spi_device(hcd->self.controller) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd->self.controller={-9223372036854775808:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, to_spi_device(hcd->self.controller)={-9223372036854775808:0}, urb={0:0}, urb={0:0}] [L5544] tmp = to_spi_device(hcd->self.controller) [L5545] spi = tmp VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-9223372036854775808:0}, tmp={-9223372036854775808:0}, urb={0:0}, urb={0:0}] [L5546] CALL, EXPR hcd_to_max3421(hcd) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L4223] return ((struct max3421_hcd *)(& hcd->hcd_priv)); VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \result={0:899}, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5546] RET, EXPR hcd_to_max3421(hcd) VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hcd_to_max3421(hcd)={0:899}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-9223372036854775808:0}, tmp={-9223372036854775808:0}, urb={0:0}, urb={0:0}] [L5546] tmp___0 = hcd_to_max3421(hcd) [L5547] max3421_hcd = tmp___0 [L5548] urb->pipe [L5549] case 1U: VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-9223372036854775808:0}, tmp={-9223372036854775808:0}, tmp___0={0:899}, urb->pipe=-2147483648, urb={0:0}, urb={0:0}] [L5550] case 0U: VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-9223372036854775808:0}, tmp={-9223372036854775808:0}, tmp___0={0:899}, urb->pipe=-2147483648, urb={0:0}, urb={0:0}] [L5557] default: VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-9223372036854775808:0}, tmp={-9223372036854775808:0}, tmp___0={0:899}, urb->pipe=-2147483648, urb={0:0}, urb={0:0}] [L5561] CALL ldv_spin_lock() VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6582] ldv_spin = 1 VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L5561] RET ldv_spin_lock() VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, \old(mem_flags)=16, __this_module={0:0}, hcd={0:0}, hcd={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd={0:899}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, mem_flags=16, ref_cnt=0, spi={-9223372036854775808:0}, tmp={-9223372036854775808:0}, tmp___0={0:899}, urb->pipe=-2147483648, urb={0:0}, urb={0:0}] [L5562] EXPR urb->ep [L5562] EXPR (urb->ep)->hcpriv [L5562] max3421_ep = (struct max3421_ep *)(urb->ep)->hcpriv [L5563] COND TRUE (unsigned long )max3421_ep == (unsigned long )((struct max3421_ep *)0) [L5564] CALL kzalloc(40UL, mem_flags) [L6513] CALL ldv_check_alloc_flags(flags) VAL [LDV_IN_INTERRUPT=1, \old(flags)=16, \old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6549] COND FALSE !(ldv_spin == 0 || ! (flags & 16U)) VAL [LDV_IN_INTERRUPT=1, \old(flags)=16, \old(ldv_spin)=0, __this_module={0:0}, flags=16, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L6551] CALL ldv_error() VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] [L3987] reach_error() VAL [LDV_IN_INTERRUPT=1, \old(ldv_spin)=0, __this_module={0:0}, hrsl_to_error={87:0}, ldv_irq_1_0=0, ldv_irq_1_1=0, ldv_irq_1_2=0, ldv_irq_1_3=0, ldv_irq_data_1_0={0:0}, ldv_irq_data_1_1={0:0}, ldv_irq_data_1_2={0:0}, ldv_irq_data_1_3={0:0}, ldv_irq_line_1_0=0, ldv_irq_line_1_1=0, ldv_irq_line_1_2=0, ldv_irq_line_1_3=0, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_spin=1, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, max3421_driver={89:0}, max3421_driver_group0={0:0}, max3421_hcd_desc={88:0}, max3421_hcd_desc_group0={0:0}, max3421_hcd_desc_group1={0:0}, max3421_hcd_list={86:0}, ref_cnt=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 37 procedures, 571 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.3s, OverallIterations: 5, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 1.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1203 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1158 mSDsluCounter, 9572 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6086 mSDsCounter, 12 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 120 IncrementalHoareTripleChecker+Invalid, 132 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 12 mSolverCounterUnsat, 3486 mSDtfsCounter, 120 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 314 GetRequests, 305 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1287occurred in iteration=4, InterpolantAutomatonStates: 16, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 4 MinimizatonAttempts, 431 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 1.7s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 414 NumberOfCodeBlocks, 414 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 311 ConstructedInterpolants, 0 QuantifiedInterpolants, 363 SizeOfPredicates, 2 NumberOfNonLiveVariables, 2705 ConjunctsInSsa, 16 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 150/150 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2023-11-06 23:09:27,976 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_771685f9-b318-4e2e-965d-380c1c7f49f0/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample