./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--rndis_wlan.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e2fb8bed Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--rndis_wlan.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 3f5bdb6b0aa6babe38c3d2b7c8b86a9d169e61742b5c110bfab8a392415efc49 --- Real Ultimate output --- This is Ultimate 0.3.0-?-e2fb8be-m [2025-03-08 19:57:53,278 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-03-08 19:57:53,330 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2025-03-08 19:57:53,335 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-03-08 19:57:53,335 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-03-08 19:57:53,351 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-03-08 19:57:53,352 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-03-08 19:57:53,352 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-03-08 19:57:53,352 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Use memory slicer=true [2025-03-08 19:57:53,353 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-03-08 19:57:53,353 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Use SBE=true [2025-03-08 19:57:53,353 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-03-08 19:57:53,353 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Use constant arrays=true [2025-03-08 19:57:53,354 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-03-08 19:57:53,354 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-03-08 19:57:53,354 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3f5bdb6b0aa6babe38c3d2b7c8b86a9d169e61742b5c110bfab8a392415efc49 [2025-03-08 19:57:53,606 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-03-08 19:57:53,612 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-03-08 19:57:53,614 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-03-08 19:57:53,615 INFO L270 PluginConnector]: Initializing CDTParser... [2025-03-08 19:57:53,616 INFO L274 PluginConnector]: CDTParser initialized [2025-03-08 19:57:53,617 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--rndis_wlan.ko-entry_point.cil.out.i [2025-03-08 19:57:54,801 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/194dc2bc0/059e409bdc454264a408dedbc6626564/FLAG189ec10f7 [2025-03-08 19:57:55,306 INFO L384 CDTParser]: Found 1 translation units. [2025-03-08 19:57:55,306 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--rndis_wlan.ko-entry_point.cil.out.i [2025-03-08 19:57:55,356 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/194dc2bc0/059e409bdc454264a408dedbc6626564/FLAG189ec10f7 [2025-03-08 19:57:55,866 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/194dc2bc0/059e409bdc454264a408dedbc6626564 [2025-03-08 19:57:55,869 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-03-08 19:57:55,870 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-03-08 19:57:55,871 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-03-08 19:57:55,871 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-03-08 19:57:55,874 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-03-08 19:57:55,875 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.03 07:57:55" (1/1) ... [2025-03-08 19:57:55,875 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@795eed21 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:55, skipping insertion in model container [2025-03-08 19:57:55,876 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.03 07:57:55" (1/1) ... [2025-03-08 19:57:56,015 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-03-08 19:57:59,283 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--rndis_wlan.ko-entry_point.cil.out.i[448621,448634] [2025-03-08 19:57:59,341 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-08 19:57:59,379 INFO L200 MainTranslator]: Completed pre-run [2025-03-08 19:57:59,529 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [7111] [2025-03-08 19:57:59,532 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; btr %2, %0; setc %1": "+m" (*addr), "=qm" (c): "Ir" (nr): "memory"); [7119-7120] [2025-03-08 19:57:59,533 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [7133] [2025-03-08 19:57:59,544 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"include/net/cfg80211.h"), "i" (3259), "i" (12UL)); [7553-7554] [2025-03-08 19:57:59,754 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--rndis_wlan.ko-entry_point.cil.out.i[448621,448634] [2025-03-08 19:57:59,763 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-08 19:57:59,921 INFO L204 MainTranslator]: Completed translation [2025-03-08 19:57:59,923 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59 WrapperNode [2025-03-08 19:57:59,923 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-03-08 19:57:59,925 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-03-08 19:57:59,925 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-03-08 19:57:59,925 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-03-08 19:57:59,931 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:00,042 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:00,368 INFO L138 Inliner]: procedures = 321, calls = 4679, calls flagged for inlining = 124, calls inlined = 122, statements flattened = 8993 [2025-03-08 19:58:00,369 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-03-08 19:58:00,370 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-03-08 19:58:00,370 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-03-08 19:58:00,370 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-03-08 19:58:00,380 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:00,381 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:00,437 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:00,929 WARN L109 MemorySlicer]: Omit memory slicing because it failed with the following exception: Unsupported: Memory array in LHS [2025-03-08 19:58:00,929 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:00,930 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:01,094 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:01,113 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:01,155 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:01,178 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:01,234 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-03-08 19:58:01,236 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-03-08 19:58:01,236 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-03-08 19:58:01,236 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-03-08 19:58:01,237 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (1/1) ... [2025-03-08 19:58:01,241 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-03-08 19:58:01,251 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-08 19:58:01,263 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-03-08 19:58:01,267 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-03-08 19:58:01,284 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab32 [2025-03-08 19:58:01,284 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab32 [2025-03-08 19:58:01,284 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_wlan_reset [2025-03-08 19:58:01,284 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_wlan_reset [2025-03-08 19:58:01,284 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_frequency_to_channel [2025-03-08 19:58:01,284 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_frequency_to_channel [2025-03-08 19:58:01,284 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_wlan_stop [2025-03-08 19:58:01,284 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_wlan_stop [2025-03-08 19:58:01,284 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2025-03-08 19:58:01,284 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2025-03-08 19:58:01,284 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_set_config_parameter_str [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_set_config_parameter_str [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure cancel_delayed_work_sync [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure cancel_delayed_work_sync [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_set_power_mgmt [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_set_power_mgmt [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_get_station [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_get_station [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure cfg80211_inform_bss [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure cfg80211_inform_bss [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure eth_zero_addr [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure eth_zero_addr [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_cipher_to_alg [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_cipher_to_alg [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure netif_carrier_off [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_carrier_off [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_pause_rx [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_pause_rx [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_disconnect_5 [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_disconnect_5 [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure ieee80211_get_channel [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure ieee80211_get_channel [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_leave_ibss [2025-03-08 19:58:01,285 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_leave_ibss [2025-03-08 19:58:01,285 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_disconnect_7 [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_disconnect_7 [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_disconnect_6 [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_disconnect_6 [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_wlan_worker [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_wlan_worker [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure add_wep_key [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure add_wep_key [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_change_virtual_intf [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_change_virtual_intf [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_set_tx_power [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_set_tx_power [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_tx_fixup [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_tx_fixup [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_set_default_key [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_set_default_key [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_del_pmksa [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_del_pmksa [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure is_broadcast_ether_addr [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure is_broadcast_ether_addr [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure queue_delayed_work_on [2025-03-08 19:58:01,286 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_delayed_work_on [2025-03-08 19:58:01,286 INFO L130 BoogieDeclarations]: Found specification of procedure activate_work_3 [2025-03-08 19:58:01,289 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_work_3 [2025-03-08 19:58:01,289 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_get_tx_power [2025-03-08 19:58:01,289 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_get_tx_power [2025-03-08 19:58:01,289 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_wlan_bind [2025-03-08 19:58:01,289 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_wlan_bind [2025-03-08 19:58:01,289 INFO L130 BoogieDeclarations]: Found specification of procedure set_bssid [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bssid [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_del_key [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_del_key [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_wlan_set_multicast_list [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_wlan_set_multicast_list [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure eth_broadcast_addr [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure eth_broadcast_addr [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_err [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_err [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_purge_paused_rxq [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_purge_paused_rxq [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure ERR_PTR [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure ERR_PTR [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_netdev_dbg [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_netdev_dbg [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_get_scan_results [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_get_scan_results [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2025-03-08 19:58:01,290 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2025-03-08 19:58:01,290 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_set_cqm_rssi_config [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_set_cqm_rssi_config [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_wlan_unbind [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_wlan_unbind [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_join_ibss [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_join_ibss [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure clear_bssid [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure clear_bssid [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure set_encr_mode [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure set_encr_mode [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure get_rndis_wlan_priv [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure get_rndis_wlan_priv [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure eth_mac_addr [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure eth_mac_addr [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure set_device_pmkids [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure set_device_pmkids [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_flush_pmksa [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_flush_pmksa [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure set_multicast_list [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure set_multicast_list [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure eth_validate_addr [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure eth_validate_addr [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure get_device_pmkids [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure get_device_pmkids [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure netif_addr_unlock_bh [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure netif_addr_unlock_bh [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure is_zero_ether_addr [2025-03-08 19:58:01,291 INFO L138 BoogieDeclarations]: Found implementation of procedure is_zero_ether_addr [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2025-03-08 19:58:01,291 INFO L130 BoogieDeclarations]: Found specification of procedure disable_work_3 [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_work_3 [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure set_infra_mode [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure set_infra_mode [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_command [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_command [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure cfg80211_scan_done [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure cfg80211_scan_done [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure cancel_work_sync [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure cancel_work_sync [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_warn [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_warn [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure next_bssid_list_item [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure next_bssid_list_item [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work_on [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work_on [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_fill_station_info [2025-03-08 19:58:01,292 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_fill_station_info [2025-03-08 19:58:01,292 INFO L130 BoogieDeclarations]: Found specification of procedure set_priv_filter [2025-03-08 19:58:01,295 INFO L138 BoogieDeclarations]: Found implementation of procedure set_priv_filter [2025-03-08 19:58:01,295 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2025-03-08 19:58:01,295 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2025-03-08 19:58:01,295 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_priv [2025-03-08 19:58:01,295 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_priv [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_set_wiphy_params [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_set_wiphy_params [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure unknown_early_init [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure unknown_early_init [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure netdev_info [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure netdev_info [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure disassociate [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure disassociate [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure round_jiffies_relative [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure round_jiffies_relative [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_set_pmksa [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_set_pmksa [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_query_oid [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_query_oid [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure oid_to_string [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure oid_to_string [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_tx_timeout [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_tx_timeout [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure get_current_channel [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current_channel [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure wiphy_free [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure wiphy_free [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_disconnect [2025-03-08 19:58:01,296 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_disconnect [2025-03-08 19:58:01,296 INFO L130 BoogieDeclarations]: Found specification of procedure is_wpa_key [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure is_wpa_key [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure deauthenticate [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure deauthenticate [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure bcm4320a_early_init [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure bcm4320a_early_init [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure cfg80211_michael_mic_failure [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure cfg80211_michael_mic_failure [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure set_default_iw_params [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure set_default_iw_params [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure wiphy_priv [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure wiphy_priv [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_error_status [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_error_status [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_check_bssid_list [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_check_bssid_list [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure __toupper [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure __toupper [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure bcm4320b_early_init [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure bcm4320b_early_init [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure set_channel [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure set_channel [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_status [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_status [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure level_to_qual [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure level_to_qual [2025-03-08 19:58:01,297 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_resume_rx [2025-03-08 19:58:01,297 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_resume_rx [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure set_essid [2025-03-08 19:58:01,300 INFO L138 BoogieDeclarations]: Found implementation of procedure set_essid [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure cfg80211_put_bss [2025-03-08 19:58:01,300 INFO L138 BoogieDeclarations]: Found implementation of procedure cfg80211_put_bss [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure ether_addr_equal [2025-03-08 19:58:01,300 INFO L138 BoogieDeclarations]: Found implementation of procedure ether_addr_equal [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_start_bssid_list_scan [2025-03-08 19:58:01,300 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_start_bssid_list_scan [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_device_poller [2025-03-08 19:58:01,300 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_device_poller [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_copy_module_params [2025-03-08 19:58:01,300 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_copy_module_params [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_add_key [2025-03-08 19:58:01,300 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_add_key [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2025-03-08 19:58:01,300 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2025-03-08 19:58:01,300 INFO L130 BoogieDeclarations]: Found specification of procedure get_bcm4320_power_dbm [2025-03-08 19:58:01,300 INFO L138 BoogieDeclarations]: Found implementation of procedure get_bcm4320_power_dbm [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure init_timer_key [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure init_timer_key [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_rx_fixup [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_rx_fixup [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_set_oid [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_set_oid [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_wlan_indication [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_wlan_indication [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure set_auth_mode [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure set_auth_mode [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure get_bssid [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure get_bssid [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure is_associated [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure is_associated [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure queue_delayed_work [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_delayed_work [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_scan [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_scan [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure debug_print_pmkids [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_print_pmkids [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure test_and_clear_bit [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure test_and_clear_bit [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure rndis_dump_station [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure rndis_dump_station [2025-03-08 19:58:01,301 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2025-03-08 19:58:01,301 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2025-03-08 19:58:02,138 INFO L256 CfgBuilder]: Building ICFG [2025-03-08 19:58:02,142 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2025-03-08 19:58:02,226 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L11940: call ULTIMATE.dealloc(~#descriptor~45#1.base, ~#descriptor~45#1.offset);havoc ~#descriptor~45#1.base, ~#descriptor~45#1.offset; [2025-03-08 19:58:02,231 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14598: havoc #t~nondet1708; [2025-03-08 19:58:02,324 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L11977: call ULTIMATE.dealloc(~#filter~1#1.base, ~#filter~1#1.offset);havoc ~#filter~1#1.base, ~#filter~1#1.offset;call ULTIMATE.dealloc(~#descriptor~46#1.base, ~#descriptor~46#1.offset);havoc ~#descriptor~46#1.base, ~#descriptor~46#1.offset; [2025-03-08 19:58:02,396 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8703: call ULTIMATE.dealloc(~#config~1.base, ~#config~1.offset);havoc ~#config~1.base, ~#config~1.offset;call ULTIMATE.dealloc(~#len~2.base, ~#len~2.offset);havoc ~#len~2.base, ~#len~2.offset;call ULTIMATE.dealloc(~#descriptor~12.base, ~#descriptor~12.offset);havoc ~#descriptor~12.base, ~#descriptor~12.offset; [2025-03-08 19:58:02,540 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8058: call ULTIMATE.dealloc(rndis_set_config_parameter_~#descriptor~2#1.base, rndis_set_config_parameter_~#descriptor~2#1.offset);havoc rndis_set_config_parameter_~#descriptor~2#1.base, rndis_set_config_parameter_~#descriptor~2#1.offset;call ULTIMATE.dealloc(rndis_set_config_parameter_~#descriptor___0~2#1.base, rndis_set_config_parameter_~#descriptor___0~2#1.offset);havoc rndis_set_config_parameter_~#descriptor___0~2#1.base, rndis_set_config_parameter_~#descriptor___0~2#1.offset;call ULTIMATE.dealloc(rndis_set_config_parameter_~#descriptor___1~1#1.base, rndis_set_config_parameter_~#descriptor___1~1#1.offset);havoc rndis_set_config_parameter_~#descriptor___1~1#1.base, rndis_set_config_parameter_~#descriptor___1~1#1.offset; [2025-03-08 19:58:02,543 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2025-03-08 19:58:02,549 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14535: havoc #t~nondet1701; [2025-03-08 19:58:02,627 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10846: call ULTIMATE.dealloc(~#mode~1.base, ~#mode~1.offset);havoc ~#mode~1.base, ~#mode~1.offset;call ULTIMATE.dealloc(~#descriptor~38.base, ~#descriptor~38.offset);havoc ~#descriptor~38.base, ~#descriptor~38.offset;call ULTIMATE.dealloc(~#descriptor___0~10.base, ~#descriptor___0~10.offset);havoc ~#descriptor___0~10.base, ~#descriptor___0~10.offset; [2025-03-08 19:58:02,647 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14554: havoc cfg80211_inform_bss_width_#t~ret1703#1.base, cfg80211_inform_bss_width_#t~ret1703#1.offset; [2025-03-08 19:58:02,730 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14612: havoc #t~nondet1710; [2025-03-08 19:58:02,736 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14515: havoc __ieee80211_get_channel_#t~ret1699#1.base, __ieee80211_get_channel_#t~ret1699#1.offset; [2025-03-08 19:58:02,767 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10459: call ULTIMATE.dealloc(~#descriptor~31.base, ~#descriptor~31.offset);havoc ~#descriptor~31.base, ~#descriptor~31.offset; [2025-03-08 19:58:02,771 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14620: havoc #t~nondet1712; [2025-03-08 19:58:02,772 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14616: havoc #t~nondet1711; [2025-03-08 19:58:03,051 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10920: call ULTIMATE.dealloc(rndis_wlan_craft_connected_bss_~#ssid~3#1.base, rndis_wlan_craft_connected_bss_~#ssid~3#1.offset);havoc rndis_wlan_craft_connected_bss_~#ssid~3#1.base, rndis_wlan_craft_connected_bss_~#ssid~3#1.offset;call ULTIMATE.dealloc(rndis_wlan_craft_connected_bss_~#beacon_period~0#1.base, rndis_wlan_craft_connected_bss_~#beacon_period~0#1.offset);havoc rndis_wlan_craft_connected_bss_~#beacon_period~0#1.base, rndis_wlan_craft_connected_bss_~#beacon_period~0#1.offset;call ULTIMATE.dealloc(rndis_wlan_craft_connected_bss_~#rssi~1#1.base, rndis_wlan_craft_connected_bss_~#rssi~1#1.offset);havoc rndis_wlan_craft_connected_bss_~#rssi~1#1.base, rndis_wlan_craft_connected_bss_~#rssi~1#1.offset;call ULTIMATE.dealloc(rndis_wlan_craft_connected_bss_~#ie_buf~0#1.base, rndis_wlan_craft_connected_bss_~#ie_buf~0#1.offset);havoc rndis_wlan_craft_connected_bss_~#ie_buf~0#1.base, rndis_wlan_craft_connected_bss_~#ie_buf~0#1.offset;call ULTIMATE.dealloc(rndis_wlan_craft_connected_bss_~#len~7#1.base, rndis_wlan_craft_connected_bss_~#len~7#1.offset);havoc rndis_wlan_craft_connected_bss_~#len~7#1.base, rndis_wlan_craft_connected_bss_~#len~7#1.offset;call ULTIMATE.dealloc(rndis_wlan_craft_connected_bss_~#descriptor~39#1.base, rndis_wlan_craft_connected_bss_~#descriptor~39#1.offset);havoc rndis_wlan_craft_connected_bss_~#descriptor~39#1.base, rndis_wlan_craft_connected_bss_~#descriptor~39#1.offset;call ULTIMATE.dealloc(rndis_wlan_craft_connected_bss_~#descriptor___0~11#1.base, rndis_wlan_craft_connected_bss_~#descriptor___0~11#1.offset);havoc rndis_wlan_craft_connected_bss_~#descriptor___0~11#1.base, rndis_wlan_craft_connected_bss_~#descriptor___0~11#1.offset;call ULTIMATE.dealloc(rndis_wlan_craft_connected_bss_~#descriptor___1~7#1.base, rndis_wlan_craft_connected_bss_~#descriptor___1~7#1.offset);havoc rndis_wlan_craft_connected_bss_~#descriptor___1~7#1.base, rndis_wlan_craft_connected_bss_~#descriptor___1~7#1.offset; [2025-03-08 19:58:03,052 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8270: call ULTIMATE.dealloc(get_association_info_~#len#1.base, get_association_info_~#len#1.offset);havoc get_association_info_~#len#1.base, get_association_info_~#len#1.offset; [2025-03-08 19:58:03,053 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L11023: call ULTIMATE.dealloc(rndis_wlan_do_link_up_work_~#bssid~2#1.base, rndis_wlan_do_link_up_work_~#bssid~2#1.offset);havoc rndis_wlan_do_link_up_work_~#bssid~2#1.base, rndis_wlan_do_link_up_work_~#bssid~2#1.offset;call ULTIMATE.dealloc(rndis_wlan_do_link_up_work_~#match_bss~0#1.base, rndis_wlan_do_link_up_work_~#match_bss~0#1.offset);havoc rndis_wlan_do_link_up_work_~#match_bss~0#1.base, rndis_wlan_do_link_up_work_~#match_bss~0#1.offset;call ULTIMATE.dealloc(rndis_wlan_do_link_up_work_~#descriptor~40#1.base, rndis_wlan_do_link_up_work_~#descriptor~40#1.offset);havoc rndis_wlan_do_link_up_work_~#descriptor~40#1.base, rndis_wlan_do_link_up_work_~#descriptor~40#1.offset; [2025-03-08 19:58:03,125 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8745: call ULTIMATE.dealloc(~#ndis_key~0.base, ~#ndis_key~0.offset);havoc ~#ndis_key~0.base, ~#ndis_key~0.offset;call ULTIMATE.dealloc(~#descriptor~13.base, ~#descriptor~13.offset);havoc ~#descriptor~13.base, ~#descriptor~13.offset; [2025-03-08 19:58:03,176 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9588: call ULTIMATE.dealloc(~#descriptor~22.base, ~#descriptor~22.offset);havoc ~#descriptor~22.base, ~#descriptor~22.offset; [2025-03-08 19:58:03,181 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14715: havoc #t~ret1728.base, #t~ret1728.offset; [2025-03-08 19:58:07,360 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10583: call ULTIMATE.dealloc(~#key~1.base, ~#key~1.offset);havoc ~#key~1.base, ~#key~1.offset;call ULTIMATE.dealloc(~#descriptor~34.base, ~#descriptor~34.offset);havoc ~#descriptor~34.base, ~#descriptor~34.offset; [2025-03-08 19:58:11,590 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10756: call ULTIMATE.dealloc(~#descriptor~36#1.base, ~#descriptor~36#1.offset);havoc ~#descriptor~36#1.base, ~#descriptor~36#1.offset; [2025-03-08 19:58:11,591 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9382: call ULTIMATE.dealloc(remove_pmkid_~#descriptor~20#1.base, remove_pmkid_~#descriptor~20#1.offset);havoc remove_pmkid_~#descriptor~20#1.base, remove_pmkid_~#descriptor~20#1.offset; [2025-03-08 19:58:11,635 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L7505: havoc #t~mem99;havoc #t~mem100;havoc #t~bitwise101;havoc #t~mem102;havoc #t~bitwise103; [2025-03-08 19:58:11,661 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14697: havoc #t~nondet1724; [2025-03-08 19:58:11,769 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9634: call ULTIMATE.dealloc(~#descriptor~23.base, ~#descriptor~23.offset);havoc ~#descriptor~23.base, ~#descriptor~23.offset; [2025-03-08 19:58:12,247 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L11473: call ULTIMATE.dealloc(rndis_wlan_get_caps_~#networks_supported~0#1.base, rndis_wlan_get_caps_~#networks_supported~0#1.offset);havoc rndis_wlan_get_caps_~#networks_supported~0#1.base, rndis_wlan_get_caps_~#networks_supported~0#1.offset;call ULTIMATE.dealloc(rndis_wlan_get_caps_~#caps_buf~0#1.base, rndis_wlan_get_caps_~#caps_buf~0#1.offset);havoc rndis_wlan_get_caps_~#caps_buf~0#1.base, rndis_wlan_get_caps_~#caps_buf~0#1.offset;call ULTIMATE.dealloc(rndis_wlan_get_caps_~#len~9#1.base, rndis_wlan_get_caps_~#len~9#1.offset);havoc rndis_wlan_get_caps_~#len~9#1.base, rndis_wlan_get_caps_~#len~9#1.offset;call ULTIMATE.dealloc(rndis_wlan_get_caps_~#descriptor~43#1.base, rndis_wlan_get_caps_~#descriptor~43#1.offset);havoc rndis_wlan_get_caps_~#descriptor~43#1.base, rndis_wlan_get_caps_~#descriptor~43#1.offset; [2025-03-08 19:58:12,247 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14587: havoc generic_rndis_bind_#t~nondet1706#1; [2025-03-08 19:58:12,247 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14777: havoc wiphy_new_nm_#t~ret1737#1.base, wiphy_new_nm_#t~ret1737#1.offset; [2025-03-08 19:58:12,247 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14781: havoc wiphy_register_#t~nondet1738#1; [2025-03-08 19:58:12,247 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14509: havoc __alloc_workqueue_key_#t~ret1698#1.base, __alloc_workqueue_key_#t~ret1698#1.offset; [2025-03-08 19:58:12,247 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L11793: call ULTIMATE.dealloc(~#len~11#1.base, ~#len~11#1.offset);havoc ~#len~11#1.base, ~#len~11#1.offset;call ULTIMATE.dealloc(~#tmp~77#1.base, ~#tmp~77#1.offset);havoc ~#tmp~77#1.base, ~#tmp~77#1.offset;call ULTIMATE.dealloc(~#__key~0#1.base, ~#__key~0#1.offset);havoc ~#__key~0#1.base, ~#__key~0#1.offset;call ULTIMATE.dealloc(~#__key___0~0#1.base, ~#__key___0~0#1.offset);havoc ~#__key___0~0#1.base, ~#__key___0~0#1.offset;call ULTIMATE.dealloc(~#__key___1~0#1.base, ~#__key___1~0#1.offset);havoc ~#__key___1~0#1.base, ~#__key___1~0#1.offset;call ULTIMATE.dealloc(~#__constr_expr_0~0#1.base, ~#__constr_expr_0~0#1.offset);havoc ~#__constr_expr_0~0#1.base, ~#__constr_expr_0~0#1.offset;call ULTIMATE.dealloc(~#__key___2~0#1.base, ~#__key___2~0#1.offset);havoc ~#__key___2~0#1.base, ~#__key___2~0#1.offset;call ULTIMATE.dealloc(~#__constr_expr_1~0#1.base, ~#__constr_expr_1~0#1.offset);havoc ~#__constr_expr_1~0#1.base, ~#__constr_expr_1~0#1.offset;call ULTIMATE.dealloc(~#__key___3~0#1.base, ~#__key___3~0#1.offset);havoc ~#__key___3~0#1.base, ~#__key___3~0#1.offset;call ULTIMATE.dealloc(~#__key___4~0#1.base, ~#__key___4~0#1.offset);havoc ~#__key___4~0#1.base, ~#__key___4~0#1.offset;call ULTIMATE.dealloc(~#__constr_expr_2~0#1.base, ~#__constr_expr_2~0#1.offset);havoc ~#__constr_expr_2~0#1.base, ~#__constr_expr_2~0#1.offset;call ULTIMATE.dealloc(~#__key___5~0#1.base, ~#__key___5~0#1.offset);havoc ~#__key___5~0#1.base, ~#__key___5~0#1.offset; [2025-03-08 19:58:12,393 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9087: call ULTIMATE.dealloc(remove_key_~#remove_key___0~0#1.base, remove_key_~#remove_key___0~0#1.offset);havoc remove_key_~#remove_key___0~0#1.base, remove_key_~#remove_key___0~0#1.offset;call ULTIMATE.dealloc(remove_key_~#keyindex~0#1.base, remove_key_~#keyindex~0#1.offset);havoc remove_key_~#keyindex~0#1.base, remove_key_~#keyindex~0#1.offset;call ULTIMATE.dealloc(remove_key_~#descriptor~16#1.base, remove_key_~#descriptor~16#1.offset);havoc remove_key_~#descriptor~16#1.base, remove_key_~#descriptor~16#1.offset; [2025-03-08 19:58:12,394 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10554: call ULTIMATE.dealloc(~#descriptor~33#1.base, ~#descriptor~33#1.offset);havoc ~#descriptor~33#1.base, ~#descriptor~33#1.offset; [2025-03-08 19:58:12,412 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L7127: havoc constant_test_bit_#t~mem1#1;havoc constant_test_bit_#t~bitwise2#1; [2025-03-08 19:58:12,698 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9718: call ULTIMATE.dealloc(rndis_bss_info_update_~#descriptor~25#1.base, rndis_bss_info_update_~#descriptor~25#1.offset);havoc rndis_bss_info_update_~#descriptor~25#1.base, rndis_bss_info_update_~#descriptor~25#1.offset; [2025-03-08 19:58:12,699 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9810: call ULTIMATE.dealloc(~#bssid_len~1#1.base, ~#bssid_len~1#1.offset);havoc ~#bssid_len~1#1.base, ~#bssid_len~1#1.offset;call ULTIMATE.dealloc(~#new_len~0#1.base, ~#new_len~0#1.offset);havoc ~#new_len~0#1.base, ~#new_len~0#1.offset;call ULTIMATE.dealloc(~#descriptor~26#1.base, ~#descriptor~26#1.offset);havoc ~#descriptor~26#1.base, ~#descriptor~26#1.offset;call ULTIMATE.dealloc(~#descriptor___0~6#1.base, ~#descriptor___0~6#1.offset);havoc ~#descriptor___0~6#1.base, ~#descriptor___0~6#1.offset;call ULTIMATE.dealloc(~#descriptor___1~4#1.base, ~#descriptor___1~4#1.offset);havoc ~#descriptor___1~4#1.base, ~#descriptor___1~4#1.offset; [2025-03-08 19:58:12,746 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L11764: call ULTIMATE.dealloc(~#buf~3.base, ~#buf~3.offset);havoc ~#buf~3.base, ~#buf~3.offset; [2025-03-08 19:58:12,844 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8631: call ULTIMATE.dealloc(~#config~0#1.base, ~#config~0#1.offset);havoc ~#config~0#1.base, ~#config~0#1.offset;call ULTIMATE.dealloc(~#len~1#1.base, ~#len~1#1.offset);havoc ~#len~1#1.base, ~#len~1#1.offset;call ULTIMATE.dealloc(~#descriptor~11#1.base, ~#descriptor~11#1.offset);havoc ~#descriptor~11#1.base, ~#descriptor~11#1.offset;call ULTIMATE.dealloc(~#descriptor___0~3#1.base, ~#descriptor___0~3#1.offset);havoc ~#descriptor___0~3#1.base, ~#descriptor___0~3#1.offset;call ULTIMATE.dealloc(~#descriptor___1~2#1.base, ~#descriptor___1~2#1.offset);havoc ~#descriptor___1~2#1.base, ~#descriptor___1~2#1.offset; [2025-03-08 19:58:12,844 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14594: havoc ieee80211_channel_to_frequency_#t~nondet1707#1; [2025-03-08 19:58:12,972 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8196: call ULTIMATE.dealloc(~#descriptor~3.base, ~#descriptor~3.offset);havoc ~#descriptor~3.base, ~#descriptor~3.offset; [2025-03-08 19:58:13,012 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9919: call ULTIMATE.dealloc(~#descriptor~27.base, ~#descriptor~27.offset);havoc ~#descriptor~27.base, ~#descriptor~27.offset; [2025-03-08 19:58:13,353 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10250: call ULTIMATE.dealloc(~#ssid~2.base, ~#ssid~2.offset);havoc ~#ssid~2.base, ~#ssid~2.offset;call ULTIMATE.dealloc(~#descriptor~30.base, ~#descriptor~30.offset);havoc ~#descriptor~30.base, ~#descriptor~30.offset;call ULTIMATE.dealloc(~#descriptor___0~8.base, ~#descriptor___0~8.offset);havoc ~#descriptor___0~8.base, ~#descriptor___0~8.offset;call ULTIMATE.dealloc(~#descriptor___1~6.base, ~#descriptor___1~6.offset);havoc ~#descriptor___1~6.base, ~#descriptor___1~6.offset;call ULTIMATE.dealloc(~#descriptor___2~2.base, ~#descriptor___2~2.offset);havoc ~#descriptor___2~2.base, ~#descriptor___2~2.offset;call ULTIMATE.dealloc(~#descriptor___3~2.base, ~#descriptor___3~2.offset);havoc ~#descriptor___3~2.base, ~#descriptor___3~2.offset;call ULTIMATE.dealloc(~#descriptor___4~2.base, ~#descriptor___4~2.offset);havoc ~#descriptor___4~2.base, ~#descriptor___4~2.offset;call ULTIMATE.dealloc(~#descriptor___5~2.base, ~#descriptor___5~2.offset);havoc ~#descriptor___5~2.base, ~#descriptor___5~2.offset; [2025-03-08 19:58:13,446 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8243: call ULTIMATE.dealloc(~#broadcast_mac~0.base, ~#broadcast_mac~0.offset);havoc ~#broadcast_mac~0.base, ~#broadcast_mac~0.offset; [2025-03-08 19:58:13,510 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8472: call ULTIMATE.dealloc(~#tmp~27.base, ~#tmp~27.offset);havoc ~#tmp~27.base, ~#tmp~27.offset;call ULTIMATE.dealloc(~#descriptor~7.base, ~#descriptor~7.offset);havoc ~#descriptor~7.base, ~#descriptor~7.offset; [2025-03-08 19:58:13,515 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L7724: havoc #t~mem219.base, #t~mem219.offset; [2025-03-08 19:58:13,527 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8183: call ULTIMATE.dealloc(~#tmp~19.base, ~#tmp~19.offset);havoc ~#tmp~19.base, ~#tmp~19.offset; [2025-03-08 19:58:13,692 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14522: havoc __msecs_to_jiffies_#t~nondet1700#1; [2025-03-08 19:58:13,693 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L11583: call ULTIMATE.dealloc(~#rssi~2#1.base, ~#rssi~2#1.offset);havoc ~#rssi~2#1.base, ~#rssi~2#1.offset;call ULTIMATE.dealloc(~#tmp~74#1.base, ~#tmp~74#1.offset);havoc ~#tmp~74#1.base, ~#tmp~74#1.offset;call ULTIMATE.dealloc(~#len~10#1.base, ~#len~10#1.offset);havoc ~#len~10#1.base, ~#len~10#1.offset;call ULTIMATE.dealloc(~#descriptor~44#1.base, ~#descriptor~44#1.offset);havoc ~#descriptor~44#1.base, ~#descriptor~44#1.offset; [2025-03-08 19:58:13,698 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14576: havoc #t~nondet1704; [2025-03-08 19:58:13,748 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9346: call ULTIMATE.dealloc(~#descriptor~19.base, ~#descriptor~19.offset);havoc ~#descriptor~19.base, ~#descriptor~19.offset; [2025-03-08 19:58:13,786 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10812: call ULTIMATE.dealloc(~#pmkid~0.base, ~#pmkid~0.offset);havoc ~#pmkid~0.base, ~#pmkid~0.offset;call ULTIMATE.dealloc(~#descriptor~37.base, ~#descriptor~37.offset);havoc ~#descriptor~37.base, ~#descriptor~37.offset; [2025-03-08 19:58:13,972 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L7357: havoc __kmalloc_#t~ret80#1.base, __kmalloc_#t~ret80#1.offset; [2025-03-08 19:58:13,972 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9166: call ULTIMATE.dealloc(~#filter~0#1.base, ~#filter~0#1.offset);havoc ~#filter~0#1.base, ~#filter~0#1.offset;call ULTIMATE.dealloc(~#descriptor~17#1.base, ~#descriptor~17#1.offset);havoc ~#descriptor~17#1.base, ~#descriptor~17#1.offset;call ULTIMATE.dealloc(~#descriptor___0~5#1.base, ~#descriptor___0~5#1.offset);havoc ~#descriptor___0~5#1.base, ~#descriptor___0~5#1.offset; [2025-03-08 19:58:14,271 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14580: havoc #t~nondet1705; [2025-03-08 19:58:14,716 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8813: call ULTIMATE.dealloc(add_wpa_key_~#ndis_key~1#1.base, add_wpa_key_~#ndis_key~1#1.offset);havoc add_wpa_key_~#ndis_key~1#1.base, add_wpa_key_~#ndis_key~1#1.offset;call ULTIMATE.dealloc(add_wpa_key_~#descriptor~14#1.base, add_wpa_key_~#descriptor~14#1.offset);havoc add_wpa_key_~#descriptor~14#1.base, add_wpa_key_~#descriptor~14#1.offset;call ULTIMATE.dealloc(add_wpa_key_~#descriptor___0~4#1.base, add_wpa_key_~#descriptor___0~4#1.offset);havoc add_wpa_key_~#descriptor___0~4#1.base, add_wpa_key_~#descriptor___0~4#1.offset;call ULTIMATE.dealloc(add_wpa_key_~#descriptor___1~3#1.base, add_wpa_key_~#descriptor___1~3#1.offset);havoc add_wpa_key_~#descriptor___1~3#1.base, add_wpa_key_~#descriptor___1~3#1.offset;call ULTIMATE.dealloc(add_wpa_key_~#descriptor___2~0#1.base, add_wpa_key_~#descriptor___2~0#1.offset);havoc add_wpa_key_~#descriptor___2~0#1.base, add_wpa_key_~#descriptor___2~0#1.offset;call ULTIMATE.dealloc(add_wpa_key_~#descriptor___3~0#1.base, add_wpa_key_~#descriptor___3~0#1.offset);havoc add_wpa_key_~#descriptor___3~0#1.base, add_wpa_key_~#descriptor___3~0#1.offset;call ULTIMATE.dealloc(add_wpa_key_~#descriptor___4~0#1.base, add_wpa_key_~#descriptor___4~0#1.offset);havoc add_wpa_key_~#descriptor___4~0#1.base, add_wpa_key_~#descriptor___4~0#1.offset;call ULTIMATE.dealloc(add_wpa_key_~#descriptor___5~0#1.base, add_wpa_key_~#descriptor___5~0#1.offset);havoc add_wpa_key_~#descriptor___5~0#1.base, add_wpa_key_~#descriptor___5~0#1.offset; [2025-03-08 19:58:14,834 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9291: call ULTIMATE.dealloc(~#len~3.base, ~#len~3.offset);havoc ~#len~3.base, ~#len~3.offset;call ULTIMATE.dealloc(~#descriptor~18.base, ~#descriptor~18.offset);havoc ~#descriptor~18.base, ~#descriptor~18.offset; [2025-03-08 19:58:14,880 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L7499: havoc #t~mem96;havoc #t~mem97;havoc #t~bitwise98; [2025-03-08 19:58:19,032 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9025: call ULTIMATE.dealloc(restore_key_~#key~0#1.base, restore_key_~#key~0#1.offset);havoc restore_key_~#key~0#1.base, restore_key_~#key~0#1.offset;call ULTIMATE.dealloc(restore_key_~#descriptor~15#1.base, restore_key_~#descriptor~15#1.offset);havoc restore_key_~#descriptor~15#1.base, restore_key_~#descriptor~15#1.offset; [2025-03-08 19:58:19,032 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8522: call ULTIMATE.dealloc(~#tmp___0~13#1.base, ~#tmp___0~13#1.offset);havoc ~#tmp___0~13#1.base, ~#tmp___0~13#1.offset;call ULTIMATE.dealloc(~#descriptor~8#1.base, ~#descriptor~8#1.offset);havoc ~#descriptor~8#1.base, ~#descriptor~8#1.offset; [2025-03-08 19:58:19,035 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14709: havoc #t~nondet1727; [2025-03-08 19:58:19,205 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L7937: call ULTIMATE.dealloc(~#u~1.base, ~#u~1.offset);havoc ~#u~1.base, ~#u~1.offset;call ULTIMATE.dealloc(~#descriptor~1.base, ~#descriptor~1.offset);havoc ~#descriptor~1.base, ~#descriptor~1.offset;call ULTIMATE.dealloc(~#descriptor___0~1.base, ~#descriptor___0~1.offset);havoc ~#descriptor___0~1.base, ~#descriptor___0~1.offset; [2025-03-08 19:58:19,456 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L11325: call ULTIMATE.dealloc(rndis_wlan_pmkid_cand_list_indication_~#descriptor~41#1.base, rndis_wlan_pmkid_cand_list_indication_~#descriptor~41#1.offset);havoc rndis_wlan_pmkid_cand_list_indication_~#descriptor~41#1.base, rndis_wlan_pmkid_cand_list_indication_~#descriptor~41#1.offset; [2025-03-08 19:58:19,457 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L11426: call ULTIMATE.dealloc(~#descriptor~42#1.base, ~#descriptor~42#1.offset);havoc ~#descriptor~42#1.base, ~#descriptor~42#1.offset; [2025-03-08 19:58:19,462 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14705: havoc #t~nondet1726; [2025-03-08 19:58:19,467 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14539: havoc #t~nondet1702; [2025-03-08 19:58:19,486 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14701: havoc #t~nondet1725; [2025-03-08 19:58:19,546 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8378: call ULTIMATE.dealloc(~#tmp___0~10.base, ~#tmp___0~10.offset);havoc ~#tmp___0~10.base, ~#tmp___0~10.offset;call ULTIMATE.dealloc(~#descriptor~5.base, ~#descriptor~5.offset);havoc ~#descriptor~5.base, ~#descriptor~5.offset; [2025-03-08 19:58:19,581 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10621: call ULTIMATE.dealloc(~#linkspeed~0.base, ~#linkspeed~0.offset);havoc ~#linkspeed~0.base, ~#linkspeed~0.offset;call ULTIMATE.dealloc(~#rssi~0.base, ~#rssi~0.offset);havoc ~#rssi~0.base, ~#rssi~0.offset;call ULTIMATE.dealloc(~#len~6.base, ~#len~6.offset);havoc ~#len~6.base, ~#len~6.offset; [2025-03-08 19:58:19,593 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8259: call ULTIMATE.dealloc(~#len~0.base, ~#len~0.offset);havoc ~#len~0.base, ~#len~0.offset; [2025-03-08 19:58:19,638 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8442: call ULTIMATE.dealloc(~#tmp___0~11.base, ~#tmp___0~11.offset);havoc ~#tmp___0~11.base, ~#tmp___0~11.offset;call ULTIMATE.dealloc(~#descriptor~6.base, ~#descriptor~6.offset);havoc ~#descriptor~6.base, ~#descriptor~6.offset; [2025-03-08 19:58:19,655 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8283: call ULTIMATE.dealloc(~#bssid~0.base, ~#bssid~0.offset);havoc ~#bssid~0.base, ~#bssid~0.offset; [2025-03-08 19:58:19,731 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8556: call ULTIMATE.dealloc(set_rts_threshold_~#tmp~29#1.base, set_rts_threshold_~#tmp~29#1.offset);havoc set_rts_threshold_~#tmp~29#1.base, set_rts_threshold_~#tmp~29#1.offset;call ULTIMATE.dealloc(set_rts_threshold_~#descriptor~9#1.base, set_rts_threshold_~#descriptor~9#1.offset);havoc set_rts_threshold_~#descriptor~9#1.base, set_rts_threshold_~#descriptor~9#1.offset; [2025-03-08 19:58:19,731 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8584: call ULTIMATE.dealloc(set_frag_threshold_~#tmp~30#1.base, set_frag_threshold_~#tmp~30#1.offset);havoc set_frag_threshold_~#tmp~30#1.base, set_frag_threshold_~#tmp~30#1.offset;call ULTIMATE.dealloc(set_frag_threshold_~#descriptor~10#1.base, set_frag_threshold_~#descriptor~10#1.offset);havoc set_frag_threshold_~#descriptor~10#1.base, set_frag_threshold_~#descriptor~10#1.offset; [2025-03-08 19:58:19,783 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9666: call ULTIMATE.dealloc(~#descriptor~24.base, ~#descriptor~24.offset);havoc ~#descriptor~24.base, ~#descriptor~24.offset; [2025-03-08 19:58:19,848 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L8318: call ULTIMATE.dealloc(~#ssid~0#1.base, ~#ssid~0#1.offset);havoc ~#ssid~0#1.base, ~#ssid~0#1.offset;call ULTIMATE.dealloc(~#descriptor~4#1.base, ~#descriptor~4#1.offset);havoc ~#descriptor~4#1.base, ~#descriptor~4#1.offset; [2025-03-08 19:58:19,857 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14722: havoc #t~nondet1729; [2025-03-08 19:58:19,968 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10698: call ULTIMATE.dealloc(~#descriptor~35#1.base, ~#descriptor~35#1.offset);havoc ~#descriptor~35#1.base, ~#descriptor~35#1.offset; [2025-03-08 19:58:19,968 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9453: call ULTIMATE.dealloc(update_pmkid_~#descriptor~21#1.base, update_pmkid_~#descriptor~21#1.offset);havoc update_pmkid_~#descriptor~21#1.base, update_pmkid_~#descriptor~21#1.offset; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14639: havoc ldv_ndo_init_8_#t~nondet1716#1; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L9952: call ULTIMATE.dealloc(rndis_connect_~#ssid~1#1.base, rndis_connect_~#ssid~1#1.offset);havoc rndis_connect_~#ssid~1#1.base, rndis_connect_~#ssid~1#1.offset;call ULTIMATE.dealloc(rndis_connect_~#descriptor~28#1.base, rndis_connect_~#descriptor~28#1.offset);havoc rndis_connect_~#descriptor~28#1.base, rndis_connect_~#descriptor~28#1.offset;call ULTIMATE.dealloc(rndis_connect_~#descriptor___0~7#1.base, rndis_connect_~#descriptor___0~7#1.offset);havoc rndis_connect_~#descriptor___0~7#1.base, rndis_connect_~#descriptor___0~7#1.offset;call ULTIMATE.dealloc(rndis_connect_~#descriptor___1~5#1.base, rndis_connect_~#descriptor___1~5#1.offset);havoc rndis_connect_~#descriptor___1~5#1.base, rndis_connect_~#descriptor___1~5#1.offset;call ULTIMATE.dealloc(rndis_connect_~#descriptor___2~1#1.base, rndis_connect_~#descriptor___2~1#1.offset);havoc rndis_connect_~#descriptor___2~1#1.base, rndis_connect_~#descriptor___2~1#1.offset;call ULTIMATE.dealloc(rndis_connect_~#descriptor___3~1#1.base, rndis_connect_~#descriptor___3~1#1.offset);havoc rndis_connect_~#descriptor___3~1#1.base, rndis_connect_~#descriptor___3~1#1.offset;call ULTIMATE.dealloc(rndis_connect_~#descriptor___4~1#1.base, rndis_connect_~#descriptor___4~1#1.offset);havoc rndis_connect_~#descriptor___4~1#1.base, rndis_connect_~#descriptor___4~1#1.offset;call ULTIMATE.dealloc(rndis_connect_~#descriptor___5~1#1.base, rndis_connect_~#descriptor___5~1#1.offset);havoc rndis_connect_~#descriptor___5~1#1.base, rndis_connect_~#descriptor___5~1#1.offset;call ULTIMATE.dealloc(rndis_connect_~#descriptor___6~0#1.base, rndis_connect_~#descriptor___6~0#1.offset);havoc rndis_connect_~#descriptor___6~0#1.base, rndis_connect_~#descriptor___6~0#1.offset; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14643: havoc ldv_ndo_uninit_8_#t~nondet1717#1; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L10219: call ULTIMATE.dealloc(rndis_disconnect_~#descriptor~29#1.base, rndis_disconnect_~#descriptor~29#1.offset);havoc rndis_disconnect_~#descriptor~29#1.base, rndis_disconnect_~#descriptor~29#1.offset; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14647: havoc ldv_release_9_#t~nondet1718#1; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14651: havoc ldv_reset_resume_4_#t~nondet1719#1; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14658: havoc ldv_start_5_#t~nondet1721#1; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14662: havoc ldv_start_6_#t~nondet1722#1; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14729: havoc usb_register_driver_#t~nondet1730#1; [2025-03-08 19:58:36,900 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14666: havoc ldv_start_7_#t~nondet1723#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L12687: call ULTIMATE.dealloc(main_~#ldvarg1~0#1.base, main_~#ldvarg1~0#1.offset);havoc main_~#ldvarg1~0#1.base, main_~#ldvarg1~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg2~0#1.base, main_~#ldvarg2~0#1.offset);havoc main_~#ldvarg2~0#1.base, main_~#ldvarg2~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg5~0#1.base, main_~#ldvarg5~0#1.offset);havoc main_~#ldvarg5~0#1.base, main_~#ldvarg5~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg6~0#1.base, main_~#ldvarg6~0#1.offset);havoc main_~#ldvarg6~0#1.base, main_~#ldvarg6~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg32~0#1.base, main_~#ldvarg32~0#1.offset);havoc main_~#ldvarg32~0#1.base, main_~#ldvarg32~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg31~0#1.base, main_~#ldvarg31~0#1.offset);havoc main_~#ldvarg31~0#1.base, main_~#ldvarg31~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg20~0#1.base, main_~#ldvarg20~0#1.offset);havoc main_~#ldvarg20~0#1.base, main_~#ldvarg20~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg10~0#1.base, main_~#ldvarg10~0#1.offset);havoc main_~#ldvarg10~0#1.base, main_~#ldvarg10~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg9~0#1.base, main_~#ldvarg9~0#1.offset);havoc main_~#ldvarg9~0#1.base, main_~#ldvarg9~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg24~0#1.base, main_~#ldvarg24~0#1.offset);havoc main_~#ldvarg24~0#1.base, main_~#ldvarg24~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg26~0#1.base, main_~#ldvarg26~0#1.offset);havoc main_~#ldvarg26~0#1.base, main_~#ldvarg26~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg35~0#1.base, main_~#ldvarg35~0#1.offset);havoc main_~#ldvarg35~0#1.base, main_~#ldvarg35~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg15~0#1.base, main_~#ldvarg15~0#1.offset);havoc main_~#ldvarg15~0#1.base, main_~#ldvarg15~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg16~0#1.base, main_~#ldvarg16~0#1.offset);havoc main_~#ldvarg16~0#1.base, main_~#ldvarg16~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg21~0#1.base, main_~#ldvarg21~0#1.offset);havoc main_~#ldvarg21~0#1.base, main_~#ldvarg21~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg25~0#1.base, main_~#ldvarg25~0#1.offset);havoc main_~#ldvarg25~0#1.base, main_~#ldvarg25~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg14~0#1.base, main_~#ldvarg14~0#1.offset);havoc main_~#ldvarg14~0#1.base, main_~#ldvarg14~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg17~0#1.base, main_~#ldvarg17~0#1.offset);havoc main_~#ldvarg17~0#1.base, main_~#ldvarg17~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg19~0#1.base, main_~#ldvarg19~0#1.offset);havoc main_~#ldvarg19~0#1.base, main_~#ldvarg19~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg34~0#1.base, main_~#ldvarg34~0#1.offset);havoc main_~#ldvarg34~0#1.base, main_~#ldvarg34~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg28~0#1.base, main_~#ldvarg28~0#1.offset);havoc main_~#ldvarg28~0#1.base, main_~#ldvarg28~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg38~0#1.base, main_~#ldvarg38~0#1.offset);havoc main_~#ldvarg38~0#1.base, main_~#ldvarg38~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg41~0#1.base, main_~#ldvarg41~0#1.offset);havoc main_~#ldvarg41~0#1.base, main_~#ldvarg41~0#1.offset;call ULTIMATE.dealloc(main_~#ldvarg42~0#1.base, main_~#ldvarg42~0#1.offset);havoc main_~#ldvarg42~0#1.base, main_~#ldvarg42~0#1.offset; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14736: havoc usbnet_open_#t~nondet1731#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14605: havoc ldv_bind_9_#t~nondet1709#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14743: havoc usbnet_probe_#t~nondet1732#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14750: havoc usbnet_resume_#t~nondet1733#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14624: havoc ldv_init_5_#t~nondet1713#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14757: havoc usbnet_start_xmit_#t~nondet1734#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14628: havoc ldv_init_6_#t~nondet1714#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14761: havoc usbnet_stop_#t~nondet1735#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14632: havoc ldv_init_7_#t~nondet1715#1; [2025-03-08 19:58:36,901 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L14765: havoc usbnet_suspend_#t~nondet1736#1; [2025-03-08 19:58:37,537 INFO L1307 $ProcedureCfgBuilder]: dead code at ProgramPoint L7815: call ULTIMATE.dealloc(~#u~0.base, ~#u~0.offset);havoc ~#u~0.base, ~#u~0.offset;call ULTIMATE.dealloc(~#descriptor~0.base, ~#descriptor~0.offset);havoc ~#descriptor~0.base, ~#descriptor~0.offset;call ULTIMATE.dealloc(~#descriptor___0~0.base, ~#descriptor___0~0.offset);havoc ~#descriptor___0~0.base, ~#descriptor___0~0.offset;call ULTIMATE.dealloc(~#descriptor___1~0.base, ~#descriptor___1~0.offset);havoc ~#descriptor___1~0.base, ~#descriptor___1~0.offset; [2025-03-08 19:58:38,977 INFO L? ?]: Removed 2929 outVars from TransFormulas that were not future-live. [2025-03-08 19:58:38,977 INFO L307 CfgBuilder]: Performing block encoding [2025-03-08 19:58:39,064 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-03-08 19:58:39,065 INFO L336 CfgBuilder]: Removed 1 assume(true) statements. [2025-03-08 19:58:39,066 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.03 07:58:39 BoogieIcfgContainer [2025-03-08 19:58:39,066 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-03-08 19:58:39,067 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-03-08 19:58:39,068 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-03-08 19:58:39,071 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-03-08 19:58:39,072 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.03 07:57:55" (1/3) ... [2025-03-08 19:58:39,074 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@23af81dc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.03 07:58:39, skipping insertion in model container [2025-03-08 19:58:39,074 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.03 07:57:59" (2/3) ... [2025-03-08 19:58:39,074 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@23af81dc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.03 07:58:39, skipping insertion in model container [2025-03-08 19:58:39,074 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.03 07:58:39" (3/3) ... [2025-03-08 19:58:39,075 INFO L128 eAbstractionObserver]: Analyzing ICFG linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--rndis_wlan.ko-entry_point.cil.out.i [2025-03-08 19:58:39,088 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-03-08 19:58:39,091 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--rndis_wlan.ko-entry_point.cil.out.i that has 138 procedures, 3250 locations, 1 initial locations, 8 loop locations, and 1 error locations. [2025-03-08 19:58:39,263 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-03-08 19:58:39,276 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@29a854e5, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-03-08 19:58:39,277 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2025-03-08 19:58:39,289 INFO L276 IsEmpty]: Start isEmpty. Operand has 3249 states, 2267 states have (on average 1.375827084252316) internal successors, (3119), 2296 states have internal predecessors, (3119), 844 states have call successors, (844), 137 states have call predecessors, (844), 136 states have return successors, (833), 830 states have call predecessors, (833), 833 states have call successors, (833) [2025-03-08 19:58:39,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 625 [2025-03-08 19:58:39,322 INFO L210 NwaCegarLoop]: Found error trace [2025-03-08 19:58:39,323 INFO L218 NwaCegarLoop]: trace histogram [24, 24, 24, 24, 24, 24, 24, 24, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-08 19:58:39,323 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-03-08 19:58:39,327 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-08 19:58:39,327 INFO L85 PathProgramCache]: Analyzing trace with hash -542801985, now seen corresponding path program 1 times [2025-03-08 19:58:39,333 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-08 19:58:39,333 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [225969676] [2025-03-08 19:58:39,333 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-08 19:58:39,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms