./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i --full-output -ea --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 21:55:59,565 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 21:55:59,566 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 21:55:59,593 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 21:55:59,595 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 21:55:59,598 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 21:55:59,600 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 21:55:59,605 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 21:55:59,607 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 21:55:59,611 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 21:55:59,612 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 21:55:59,613 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 21:55:59,613 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 21:55:59,615 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 21:55:59,616 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 21:55:59,618 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 21:55:59,619 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 21:55:59,620 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 21:55:59,623 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 21:55:59,627 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 21:55:59,628 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 21:55:59,629 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 21:55:59,630 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 21:55:59,631 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 21:55:59,634 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 21:55:59,634 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 21:55:59,634 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 21:55:59,635 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 21:55:59,635 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 21:55:59,636 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 21:55:59,636 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 21:55:59,637 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 21:55:59,638 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 21:55:59,639 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 21:55:59,640 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 21:55:59,640 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 21:55:59,641 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 21:55:59,641 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 21:55:59,641 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 21:55:59,641 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 21:55:59,642 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 21:55:59,643 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-02-20 21:55:59,668 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 21:55:59,669 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 21:55:59,669 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 21:55:59,669 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 21:55:59,670 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 21:55:59,670 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 21:55:59,670 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 21:55:59,671 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 21:55:59,671 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 21:55:59,671 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 21:55:59,672 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 21:55:59,672 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 21:55:59,672 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 21:55:59,672 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 21:55:59,672 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 21:55:59,672 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 21:55:59,673 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 21:55:59,673 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 21:55:59,673 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 21:55:59,673 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 21:55:59,673 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 21:55:59,673 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 21:55:59,674 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 21:55:59,674 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 21:55:59,674 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 21:55:59,674 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 21:55:59,674 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 21:55:59,674 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 21:55:59,674 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 21:55:59,675 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 21:55:59,675 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2022-02-20 21:55:59,833 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 21:55:59,850 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 21:55:59,852 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 21:55:59,853 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 21:55:59,854 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 21:55:59,855 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-02-20 21:55:59,934 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/eea20984c/b680a4e90a2a47e39f27637156691e23/FLAG38bba00aa [2022-02-20 21:56:00,424 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 21:56:00,425 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-02-20 21:56:00,456 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/eea20984c/b680a4e90a2a47e39f27637156691e23/FLAG38bba00aa [2022-02-20 21:56:00,651 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/eea20984c/b680a4e90a2a47e39f27637156691e23 [2022-02-20 21:56:00,655 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 21:56:00,657 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 21:56:00,658 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 21:56:00,658 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 21:56:00,660 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 21:56:00,661 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:56:00" (1/1) ... [2022-02-20 21:56:00,662 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@f56c916 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:00, skipping insertion in model container [2022-02-20 21:56:00,662 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:56:00" (1/1) ... [2022-02-20 21:56:00,667 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 21:56:00,753 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 21:56:01,588 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-02-20 21:56:02,276 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:56:02,299 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 21:56:02,440 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-02-20 21:56:02,558 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator has thrown an exception: de.uni_freiburg.informatik.ultimate.boogie.typechecker.TypeCheckException: Type check failed for C: len = len & 4294967294U [10012] at de.uni_freiburg.informatik.ultimate.boogie.TypeErrorReporter.report(TypeErrorReporter.java:52) at de.uni_freiburg.informatik.ultimate.boogie.typechecker.TypeCheckHelper.typeCheckBinaryExpression(TypeCheckHelper.java:207) at de.uni_freiburg.informatik.ultimate.boogie.ExpressionFactory.constructBinaryExpression(ExpressionFactory.java:597) at de.uni_freiburg.informatik.ultimate.boogie.ExpressionFactory.newBinaryExpression(ExpressionFactory.java:132) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.expressiontranslation.BitabsTranslation.abstractAssign(BitabsTranslation.java:483) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.expressiontranslation.IntegerTranslation.abstractAssginWithBitwiseOp(IntegerTranslation.java:973) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:737) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:372) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1392) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:326) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1076) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:334) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1622) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:332) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1076) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:334) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1076) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:334) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.chandler.FunctionHandler.handleFunctionDefinition(FunctionHandler.java:371) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:1465) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:289) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.processTUchild(CHandler.java:3271) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:2356) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.CHandler.visit(CHandler.java:601) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainDispatcher.dispatch(MainDispatcher.java:270) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainTranslator.performMainRun(MainTranslator.java:244) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainTranslator.translate(MainTranslator.java:206) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainTranslator.run(MainTranslator.java:115) at de.uni_freiburg.informatik.ultimate.cdt.translation.implementation.base.MainTranslator.(MainTranslator.java:93) at de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver.finish(CACSL2BoogieTranslatorObserver.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2022-02-20 21:56:02,565 INFO L158 Benchmark]: Toolchain (without parser) took 1907.66ms. Allocated memory was 104.9MB in the beginning and 144.7MB in the end (delta: 39.8MB). Free memory was 73.4MB in the beginning and 64.9MB in the end (delta: 8.5MB). Peak memory consumption was 74.6MB. Max. memory is 16.1GB. [2022-02-20 21:56:02,567 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 86.0MB. Free memory was 59.0MB in the beginning and 58.9MB in the end (delta: 31.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 21:56:02,567 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1905.95ms. Allocated memory was 104.9MB in the beginning and 144.7MB in the end (delta: 39.8MB). Free memory was 73.4MB in the beginning and 64.9MB in the end (delta: 8.5MB). Peak memory consumption was 74.6MB. Max. memory is 16.1GB. [2022-02-20 21:56:02,569 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 86.0MB. Free memory was 59.0MB in the beginning and 58.9MB in the end (delta: 31.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1905.95ms. Allocated memory was 104.9MB in the beginning and 144.7MB in the end (delta: 39.8MB). Free memory was 73.4MB in the beginning and 64.9MB in the end (delta: 8.5MB). Peak memory consumption was 74.6MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - ExceptionOrErrorResult: TypeCheckException: Type check failed for C: len = len & 4294967294U [10012] de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: TypeCheckException: Type check failed for C: len = len & 4294967294U [10012]: de.uni_freiburg.informatik.ultimate.boogie.TypeErrorReporter.report(TypeErrorReporter.java:52) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 21:56:04,016 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 21:56:04,018 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 21:56:04,043 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 21:56:04,043 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 21:56:04,045 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 21:56:04,046 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 21:56:04,050 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 21:56:04,053 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 21:56:04,056 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 21:56:04,057 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 21:56:04,058 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 21:56:04,058 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 21:56:04,060 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 21:56:04,061 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 21:56:04,063 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 21:56:04,064 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 21:56:04,064 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 21:56:04,066 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 21:56:04,070 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 21:56:04,071 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 21:56:04,072 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 21:56:04,073 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 21:56:04,074 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 21:56:04,078 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 21:56:04,078 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 21:56:04,078 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 21:56:04,087 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 21:56:04,088 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 21:56:04,089 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 21:56:04,089 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 21:56:04,089 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 21:56:04,091 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 21:56:04,091 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 21:56:04,092 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 21:56:04,092 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 21:56:04,093 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 21:56:04,093 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 21:56:04,093 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 21:56:04,094 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 21:56:04,095 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 21:56:04,095 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-02-20 21:56:04,124 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 21:56:04,124 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 21:56:04,124 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 21:56:04,125 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 21:56:04,125 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 21:56:04,125 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 21:56:04,126 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 21:56:04,127 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 21:56:04,127 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 21:56:04,127 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 21:56:04,128 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 21:56:04,128 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 21:56:04,128 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 21:56:04,128 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 21:56:04,128 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-02-20 21:56:04,128 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-02-20 21:56:04,128 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-02-20 21:56:04,129 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 21:56:04,129 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 21:56:04,129 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 21:56:04,129 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 21:56:04,129 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 21:56:04,129 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 21:56:04,129 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 21:56:04,130 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 21:56:04,130 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 21:56:04,130 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 21:56:04,130 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-02-20 21:56:04,130 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-02-20 21:56:04,130 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 21:56:04,130 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 21:56:04,131 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 21:56:04,131 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-02-20 21:56:04,131 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 138fe782a458987488cb714d4ee7d6a854842ca7c110303f565f817a9360a8e5 [2022-02-20 21:56:04,420 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 21:56:04,435 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 21:56:04,437 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 21:56:04,438 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 21:56:04,438 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 21:56:04,439 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-02-20 21:56:04,483 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/156f73fec/a968a1e27daa435f9818d9648546b606/FLAGad6f17842 [2022-02-20 21:56:05,068 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 21:56:05,071 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-02-20 21:56:05,117 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/156f73fec/a968a1e27daa435f9818d9648546b606/FLAGad6f17842 [2022-02-20 21:56:05,244 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/156f73fec/a968a1e27daa435f9818d9648546b606 [2022-02-20 21:56:05,246 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 21:56:05,247 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 21:56:05,248 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 21:56:05,248 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 21:56:05,251 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 21:56:05,252 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:56:05" (1/1) ... [2022-02-20 21:56:05,252 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@56ad5478 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:05, skipping insertion in model container [2022-02-20 21:56:05,253 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 09:56:05" (1/1) ... [2022-02-20 21:56:05,258 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 21:56:05,386 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 21:56:06,143 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-02-20 21:56:06,826 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:56:06,848 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-02-20 21:56:06,893 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 21:56:07,005 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-02-20 21:56:07,172 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:56:07,188 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 21:56:07,313 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i[213580,213593] [2022-02-20 21:56:07,509 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 21:56:07,645 INFO L208 MainTranslator]: Completed translation [2022-02-20 21:56:07,645 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07 WrapperNode [2022-02-20 21:56:07,646 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 21:56:07,646 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 21:56:07,646 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 21:56:07,647 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 21:56:07,651 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:07,708 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:07,847 INFO L137 Inliner]: procedures = 262, calls = 2608, calls flagged for inlining = 135, calls inlined = 132, statements flattened = 6145 [2022-02-20 21:56:07,848 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 21:56:07,848 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 21:56:07,849 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 21:56:07,849 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 21:56:07,855 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:07,855 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:07,898 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:07,899 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:08,072 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:08,095 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:08,115 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:08,149 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 21:56:08,150 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 21:56:08,150 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 21:56:08,150 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 21:56:08,151 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (1/1) ... [2022-02-20 21:56:08,155 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 21:56:08,161 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 21:56:08,180 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 21:56:08,185 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 21:56:08,202 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-02-20 21:56:08,202 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-02-20 21:56:08,203 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-02-20 21:56:08,203 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pm_wakeup_card [2022-02-20 21:56:08,203 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pm_wakeup_card [2022-02-20 21:56:08,203 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-02-20 21:56:08,203 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-02-20 21:56:08,203 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-02-20 21:56:08,203 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-02-20 21:56:08,203 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-02-20 21:56:08,204 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-02-20 21:56:08,204 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-02-20 21:56:08,204 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-02-20 21:56:08,204 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-02-20 21:56:08,204 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-02-20 21:56:08,204 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_cmdrsp_buf [2022-02-20 21:56:08,204 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-02-20 21:56:08,204 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-02-20 21:56:08,204 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_region [2022-02-20 21:56:08,205 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_region [2022-02-20 21:56:08,205 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-02-20 21:56:08,205 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-02-20 21:56:08,205 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-02-20 21:56:08,205 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-02-20 21:56:08,205 INFO L130 BoogieDeclarations]: Found specification of procedure usleep_range [2022-02-20 21:56:08,205 INFO L138 BoogieDeclarations]: Found implementation of procedure usleep_range [2022-02-20 21:56:08,205 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_read_reg [2022-02-20 21:56:08,205 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_read_reg [2022-02-20 21:56:08,206 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_map_pci_memory [2022-02-20 21:56:08,206 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_map_pci_memory [2022-02-20 21:56:08,206 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_reg [2022-02-20 21:56:08,206 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_reg [2022-02-20 21:56:08,206 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-02-20 21:56:08,206 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-02-20 21:56:08,206 INFO L130 BoogieDeclarations]: Found specification of procedure valid_dma_direction [2022-02-20 21:56:08,206 INFO L138 BoogieDeclarations]: Found implementation of procedure valid_dma_direction [2022-02-20 21:56:08,206 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-02-20 21:56:08,207 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-02-20 21:56:08,207 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-02-20 21:56:08,207 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-02-20 21:56:08,207 INFO L130 BoogieDeclarations]: Found specification of procedure pci_alloc_consistent [2022-02-20 21:56:08,207 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_alloc_consistent [2022-02-20 21:56:08,207 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-02-20 21:56:08,207 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-02-20 21:56:08,207 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_process_event_ready [2022-02-20 21:56:08,208 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_process_event_ready [2022-02-20 21:56:08,208 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-02-20 21:56:08,208 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-02-20 21:56:08,208 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2022-02-20 21:56:08,208 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2022-02-20 21:56:08,208 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u32 [2022-02-20 21:56:08,208 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-02-20 21:56:08,208 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-02-20 21:56:08,208 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_unmap_pci_memory [2022-02-20 21:56:08,209 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_unmap_pci_memory [2022-02-20 21:56:08,209 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-02-20 21:56:08,209 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-02-20 21:56:08,209 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-02-20 21:56:08,209 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-02-20 21:56:08,209 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-02-20 21:56:08,209 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-02-20 21:56:08,209 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_clean_pcie_ring_buf [2022-02-20 21:56:08,210 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_clean_pcie_ring_buf [2022-02-20 21:56:08,210 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_dev_wakeup_delay [2022-02-20 21:56:08,210 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_dev_wakeup_delay [2022-02-20 21:56:08,210 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-02-20 21:56:08,210 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-02-20 21:56:08,210 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-02-20 21:56:08,210 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-02-20 21:56:08,210 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_ok_to_access_hw [2022-02-20 21:56:08,210 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_ok_to_access_hw [2022-02-20 21:56:08,210 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-02-20 21:56:08,211 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-02-20 21:56:08,211 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_DMA_ADDR [2022-02-20 21:56:08,211 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_DMA_ADDR [2022-02-20 21:56:08,211 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-02-20 21:56:08,211 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-02-20 21:56:08,211 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2022-02-20 21:56:08,211 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2022-02-20 21:56:08,211 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_resume [2022-02-20 21:56:08,211 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_resume [2022-02-20 21:56:08,212 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_txbd_ring [2022-02-20 21:56:08,212 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_txbd_ring [2022-02-20 21:56:08,212 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_suspend [2022-02-20 21:56:08,212 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_suspend [2022-02-20 21:56:08,212 INFO L130 BoogieDeclarations]: Found specification of procedure __phys_addr [2022-02-20 21:56:08,212 INFO L138 BoogieDeclarations]: Found implementation of procedure __phys_addr [2022-02-20 21:56:08,212 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-02-20 21:56:08,212 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-02-20 21:56:08,212 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_enable_host_int [2022-02-20 21:56:08,213 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_enable_host_int [2022-02-20 21:56:08,213 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_disable_host_int [2022-02-20 21:56:08,213 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_disable_host_int [2022-02-20 21:56:08,213 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_not_full [2022-02-20 21:56:08,213 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_not_full [2022-02-20 21:56:08,213 INFO L130 BoogieDeclarations]: Found specification of procedure skb_trim [2022-02-20 21:56:08,213 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_trim [2022-02-20 21:56:08,213 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_evtbd_ring [2022-02-20 21:56:08,213 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_evtbd_ring [2022-02-20 21:56:08,214 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-02-20 21:56:08,214 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-02-20 21:56:08,214 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2022-02-20 21:56:08,214 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2022-02-20 21:56:08,214 INFO L130 BoogieDeclarations]: Found specification of procedure pci_free_consistent [2022-02-20 21:56:08,214 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_free_consistent [2022-02-20 21:56:08,214 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2022-02-20 21:56:08,214 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2022-02-20 21:56:08,214 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-02-20 21:56:08,215 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-02-20 21:56:08,215 INFO L130 BoogieDeclarations]: Found specification of procedure pci_set_drvdata [2022-02-20 21:56:08,215 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_set_drvdata [2022-02-20 21:56:08,215 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-02-20 21:56:08,215 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-02-20 21:56:08,215 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-02-20 21:56:08,215 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-02-20 21:56:08,215 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-02-20 21:56:08,216 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-02-20 21:56:08,216 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-02-20 21:56:08,216 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-02-20 21:56:08,216 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-02-20 21:56:08,216 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_remove [2022-02-20 21:56:08,216 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_remove [2022-02-20 21:56:08,216 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 21:56:08,216 INFO L130 BoogieDeclarations]: Found specification of procedure pci_request_region [2022-02-20 21:56:08,216 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_request_region [2022-02-20 21:56:08,217 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_delete_rxbd_ring [2022-02-20 21:56:08,217 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_delete_rxbd_ring [2022-02-20 21:56:08,217 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-02-20 21:56:08,217 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-02-20 21:56:08,217 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-02-20 21:56:08,217 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_irq_1 [2022-02-20 21:56:08,217 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_irq_1 [2022-02-20 21:56:08,217 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-02-20 21:56:08,217 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2022-02-20 21:56:08,217 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2022-02-20 21:56:08,218 INFO L130 BoogieDeclarations]: Found specification of procedure MWIFIEX_SKB_PACB [2022-02-20 21:56:08,218 INFO L138 BoogieDeclarations]: Found implementation of procedure MWIFIEX_SKB_PACB [2022-02-20 21:56:08,218 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-02-20 21:56:08,218 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-02-20 21:56:08,218 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-02-20 21:56:08,218 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-02-20 21:56:08,218 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 21:56:08,218 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 21:56:08,218 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_write_data_complete [2022-02-20 21:56:08,219 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_write_data_complete [2022-02-20 21:56:08,219 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_pcie_txbd_empty [2022-02-20 21:56:08,219 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_pcie_txbd_empty [2022-02-20 21:56:08,825 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 21:56:08,827 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 21:56:17,184 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-02-20 21:57:10,145 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 21:57:10,160 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 21:57:10,160 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 21:57:10,163 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 09:57:10 BoogieIcfgContainer [2022-02-20 21:57:10,163 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 21:57:10,164 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 21:57:10,164 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 21:57:10,166 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 21:57:10,166 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 09:56:05" (1/3) ... [2022-02-20 21:57:10,167 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4421a12a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 09:57:10, skipping insertion in model container [2022-02-20 21:57:10,167 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 09:56:07" (2/3) ... [2022-02-20 21:57:10,167 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4421a12a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 09:57:10, skipping insertion in model container [2022-02-20 21:57:10,167 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 09:57:10" (3/3) ... [2022-02-20 21:57:10,168 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_pcie.ko-entry_point.cil.out.i [2022-02-20 21:57:10,172 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 21:57:10,172 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 21:57:10,205 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 21:57:10,209 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 21:57:10,209 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 21:57:10,246 INFO L276 IsEmpty]: Start isEmpty. Operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) [2022-02-20 21:57:10,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-02-20 21:57:10,261 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 21:57:10,261 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 21:57:10,262 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 21:57:10,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 21:57:10,269 INFO L85 PathProgramCache]: Analyzing trace with hash -1790507018, now seen corresponding path program 1 times [2022-02-20 21:57:10,280 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 21:57:10,281 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1235272312] [2022-02-20 21:57:10,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 21:57:10,282 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 21:57:10,282 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 21:57:10,296 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 21:57:10,318 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-02-20 21:57:11,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 21:57:11,439 INFO L263 TraceCheckSpWp]: Trace formula consists of 1381 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 21:57:11,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 21:57:11,485 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 21:57:11,846 INFO L290 TraceCheckUtils]: 0: Hoare triple {1565#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv64, 0bv64;assume 0bv1 == #valid[0bv64];assume ~bvult64(0bv64, #StackHeapBarrier);call #Ultimate.allocInit(2bv64, 1bv64);call write~init~intINTTYPE1(48bv8, 1bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 1bv64, 1bv64, 1bv64);call #Ultimate.allocInit(121bv64, 2bv64);call #Ultimate.allocInit(37bv64, 3bv64);call #Ultimate.allocInit(12bv64, 4bv64);call #Ultimate.allocInit(16bv64, 5bv64);call #Ultimate.allocInit(25bv64, 6bv64);call #Ultimate.allocInit(25bv64, 7bv64);call #Ultimate.allocInit(27bv64, 8bv64);call #Ultimate.allocInit(13bv64, 9bv64);call #Ultimate.allocInit(29bv64, 10bv64);call #Ultimate.allocInit(232bv64, 11bv64);call #Ultimate.allocInit(36bv64, 12bv64);call #Ultimate.allocInit(36bv64, 13bv64);call #Ultimate.allocInit(55bv64, 14bv64);call #Ultimate.allocInit(45bv64, 15bv64);call #Ultimate.allocInit(55bv64, 16bv64);call #Ultimate.allocInit(45bv64, 17bv64);call #Ultimate.allocInit(24bv64, 18bv64);call #Ultimate.allocInit(13bv64, 19bv64);call #Ultimate.allocInit(19bv64, 20bv64);call #Ultimate.allocInit(232bv64, 21bv64);call #Ultimate.allocInit(46bv64, 22bv64);call #Ultimate.allocInit(60bv64, 23bv64);call #Ultimate.allocInit(26bv64, 24bv64);call #Ultimate.allocInit(19bv64, 25bv64);call #Ultimate.allocInit(13bv64, 26bv64);call #Ultimate.allocInit(13bv64, 27bv64);call #Ultimate.allocInit(31bv64, 28bv64);call #Ultimate.allocInit(232bv64, 29bv64);call #Ultimate.allocInit(32bv64, 30bv64);call #Ultimate.allocInit(32bv64, 31bv64);call #Ultimate.allocInit(13bv64, 32bv64);call #Ultimate.allocInit(31bv64, 33bv64);call #Ultimate.allocInit(232bv64, 34bv64);call #Ultimate.allocInit(48bv64, 35bv64);call #Ultimate.allocInit(48bv64, 36bv64);call #Ultimate.allocInit(13bv64, 37bv64);call #Ultimate.allocInit(23bv64, 38bv64);call #Ultimate.allocInit(232bv64, 39bv64);call #Ultimate.allocInit(25bv64, 40bv64);call #Ultimate.allocInit(25bv64, 41bv64);call #Ultimate.allocInit(35bv64, 42bv64);call #Ultimate.allocInit(13bv64, 43bv64);call #Ultimate.allocInit(23bv64, 44bv64);call #Ultimate.allocInit(232bv64, 45bv64);call #Ultimate.allocInit(37bv64, 46bv64);call #Ultimate.allocInit(37bv64, 47bv64);call #Ultimate.allocInit(13bv64, 48bv64);call #Ultimate.allocInit(32bv64, 49bv64);call #Ultimate.allocInit(232bv64, 50bv64);call #Ultimate.allocInit(30bv64, 51bv64);call #Ultimate.allocInit(30bv64, 52bv64);call #Ultimate.allocInit(31bv64, 53bv64);call #Ultimate.allocInit(30bv64, 54bv64);call #Ultimate.allocInit(37bv64, 55bv64);call #Ultimate.allocInit(13bv64, 56bv64);call #Ultimate.allocInit(22bv64, 57bv64);call #Ultimate.allocInit(232bv64, 58bv64);call #Ultimate.allocInit(52bv64, 59bv64);call #Ultimate.allocInit(52bv64, 60bv64);call #Ultimate.allocInit(39bv64, 61bv64);call #Ultimate.allocInit(13bv64, 62bv64);call #Ultimate.allocInit(27bv64, 63bv64);call #Ultimate.allocInit(232bv64, 64bv64);call #Ultimate.allocInit(53bv64, 65bv64);call #Ultimate.allocInit(53bv64, 66bv64);call #Ultimate.allocInit(13bv64, 67bv64);call #Ultimate.allocInit(30bv64, 68bv64);call #Ultimate.allocInit(232bv64, 69bv64);call #Ultimate.allocInit(38bv64, 70bv64);call #Ultimate.allocInit(38bv64, 71bv64);call #Ultimate.allocInit(47bv64, 72bv64);call #Ultimate.allocInit(13bv64, 73bv64);call #Ultimate.allocInit(30bv64, 74bv64);call #Ultimate.allocInit(232bv64, 75bv64);call #Ultimate.allocInit(52bv64, 76bv64);call #Ultimate.allocInit(52bv64, 77bv64);call #Ultimate.allocInit(13bv64, 78bv64);call #Ultimate.allocInit(30bv64, 79bv64);call #Ultimate.allocInit(232bv64, 80bv64);call #Ultimate.allocInit(38bv64, 81bv64);call #Ultimate.allocInit(38bv64, 82bv64);call #Ultimate.allocInit(47bv64, 83bv64);call #Ultimate.allocInit(13bv64, 84bv64);call #Ultimate.allocInit(30bv64, 85bv64);call #Ultimate.allocInit(232bv64, 86bv64);call #Ultimate.allocInit(53bv64, 87bv64);call #Ultimate.allocInit(53bv64, 88bv64);call #Ultimate.allocInit(13bv64, 89bv64);call #Ultimate.allocInit(31bv64, 90bv64);call #Ultimate.allocInit(232bv64, 91bv64);call #Ultimate.allocInit(39bv64, 92bv64);call #Ultimate.allocInit(39bv64, 93bv64);call #Ultimate.allocInit(47bv64, 94bv64);call #Ultimate.allocInit(13bv64, 95bv64);call #Ultimate.allocInit(31bv64, 96bv64);call #Ultimate.allocInit(232bv64, 97bv64);call #Ultimate.allocInit(60bv64, 98bv64);call #Ultimate.allocInit(60bv64, 99bv64);call #Ultimate.allocInit(51bv64, 100bv64);call #Ultimate.allocInit(30bv64, 101bv64);call #Ultimate.allocInit(13bv64, 102bv64);call #Ultimate.allocInit(36bv64, 103bv64);call #Ultimate.allocInit(232bv64, 104bv64);call #Ultimate.allocInit(32bv64, 105bv64);call #Ultimate.allocInit(32bv64, 106bv64);call #Ultimate.allocInit(38bv64, 107bv64);call #Ultimate.allocInit(41bv64, 108bv64);call #Ultimate.allocInit(13bv64, 109bv64);call #Ultimate.allocInit(32bv64, 110bv64);call #Ultimate.allocInit(232bv64, 111bv64);call #Ultimate.allocInit(40bv64, 112bv64);call #Ultimate.allocInit(40bv64, 113bv64);call #Ultimate.allocInit(13bv64, 114bv64);call #Ultimate.allocInit(32bv64, 115bv64);call #Ultimate.allocInit(232bv64, 116bv64);call #Ultimate.allocInit(43bv64, 117bv64);call #Ultimate.allocInit(43bv64, 118bv64);call #Ultimate.allocInit(35bv64, 119bv64);call #Ultimate.allocInit(23bv64, 120bv64);call #Ultimate.allocInit(13bv64, 121bv64);call #Ultimate.allocInit(23bv64, 122bv64);call #Ultimate.allocInit(232bv64, 123bv64);call #Ultimate.allocInit(37bv64, 124bv64);call #Ultimate.allocInit(37bv64, 125bv64);call #Ultimate.allocInit(42bv64, 126bv64);call #Ultimate.allocInit(13bv64, 127bv64);call #Ultimate.allocInit(23bv64, 128bv64);call #Ultimate.allocInit(232bv64, 129bv64);call #Ultimate.allocInit(38bv64, 130bv64);call #Ultimate.allocInit(38bv64, 131bv64);call #Ultimate.allocInit(49bv64, 132bv64);call #Ultimate.allocInit(13bv64, 133bv64);call #Ultimate.allocInit(23bv64, 134bv64);call #Ultimate.allocInit(232bv64, 135bv64);call #Ultimate.allocInit(86bv64, 136bv64);call #Ultimate.allocInit(86bv64, 137bv64);call #Ultimate.allocInit(13bv64, 138bv64);call #Ultimate.allocInit(23bv64, 139bv64);call #Ultimate.allocInit(232bv64, 140bv64);call #Ultimate.allocInit(46bv64, 141bv64);call #Ultimate.allocInit(46bv64, 142bv64);call #Ultimate.allocInit(44bv64, 143bv64);call #Ultimate.allocInit(41bv64, 144bv64);call #Ultimate.allocInit(13bv64, 145bv64);call #Ultimate.allocInit(31bv64, 146bv64);call #Ultimate.allocInit(232bv64, 147bv64);call #Ultimate.allocInit(41bv64, 148bv64);call #Ultimate.allocInit(41bv64, 149bv64);call #Ultimate.allocInit(25bv64, 150bv64);call #Ultimate.allocInit(13bv64, 151bv64);call #Ultimate.allocInit(31bv64, 152bv64);call #Ultimate.allocInit(232bv64, 153bv64);call #Ultimate.allocInit(51bv64, 154bv64);call #Ultimate.allocInit(51bv64, 155bv64);call #Ultimate.allocInit(13bv64, 156bv64);call #Ultimate.allocInit(31bv64, 157bv64);call #Ultimate.allocInit(232bv64, 158bv64);call #Ultimate.allocInit(37bv64, 159bv64);call #Ultimate.allocInit(37bv64, 160bv64);call #Ultimate.allocInit(42bv64, 161bv64);call #Ultimate.allocInit(41bv64, 162bv64);call #Ultimate.allocInit(13bv64, 163bv64);call #Ultimate.allocInit(31bv64, 164bv64);call #Ultimate.allocInit(232bv64, 165bv64);call #Ultimate.allocInit(51bv64, 166bv64);call #Ultimate.allocInit(51bv64, 167bv64);call #Ultimate.allocInit(38bv64, 168bv64);call #Ultimate.allocInit(27bv64, 169bv64);call #Ultimate.allocInit(52bv64, 170bv64);call #Ultimate.allocInit(27bv64, 171bv64);call #Ultimate.allocInit(52bv64, 172bv64);call #Ultimate.allocInit(27bv64, 173bv64);call #Ultimate.allocInit(57bv64, 174bv64);call #Ultimate.allocInit(27bv64, 175bv64);call #Ultimate.allocInit(37bv64, 176bv64);call #Ultimate.allocInit(27bv64, 177bv64);call #Ultimate.allocInit(42bv64, 178bv64);call #Ultimate.allocInit(35bv64, 179bv64);call #Ultimate.allocInit(22bv64, 180bv64);call #Ultimate.allocInit(51bv64, 181bv64);call #Ultimate.allocInit(44bv64, 182bv64);call #Ultimate.allocInit(44bv64, 183bv64);call #Ultimate.allocInit(44bv64, 184bv64);call #Ultimate.allocInit(44bv64, 185bv64);call #Ultimate.allocInit(42bv64, 186bv64);call #Ultimate.allocInit(33bv64, 187bv64);call #Ultimate.allocInit(13bv64, 188bv64);call #Ultimate.allocInit(34bv64, 189bv64);call #Ultimate.allocInit(232bv64, 190bv64);call #Ultimate.allocInit(23bv64, 191bv64);call #Ultimate.allocInit(23bv64, 192bv64);call #Ultimate.allocInit(23bv64, 193bv64);call #Ultimate.allocInit(36bv64, 194bv64);call #Ultimate.allocInit(43bv64, 195bv64);call #Ultimate.allocInit(43bv64, 196bv64);call #Ultimate.allocInit(13bv64, 197bv64);call #Ultimate.allocInit(33bv64, 198bv64);call #Ultimate.allocInit(232bv64, 199bv64);call #Ultimate.allocInit(69bv64, 200bv64);call #Ultimate.allocInit(69bv64, 201bv64);call #Ultimate.allocInit(13bv64, 202bv64);call #Ultimate.allocInit(33bv64, 203bv64);call #Ultimate.allocInit(232bv64, 204bv64);call #Ultimate.allocInit(31bv64, 205bv64);call #Ultimate.allocInit(31bv64, 206bv64);call #Ultimate.allocInit(43bv64, 207bv64);call #Ultimate.allocInit(13bv64, 208bv64);call #Ultimate.allocInit(33bv64, 209bv64);call #Ultimate.allocInit(232bv64, 210bv64);call #Ultimate.allocInit(47bv64, 211bv64);call #Ultimate.allocInit(47bv64, 212bv64);call #Ultimate.allocInit(13bv64, 213bv64);call #Ultimate.allocInit(33bv64, 214bv64);call #Ultimate.allocInit(232bv64, 215bv64);call #Ultimate.allocInit(22bv64, 216bv64);call #Ultimate.allocInit(22bv64, 217bv64);call #Ultimate.allocInit(13bv64, 218bv64);call #Ultimate.allocInit(33bv64, 219bv64);call #Ultimate.allocInit(232bv64, 220bv64);call #Ultimate.allocInit(24bv64, 221bv64);call #Ultimate.allocInit(24bv64, 222bv64);call #Ultimate.allocInit(36bv64, 223bv64);call #Ultimate.allocInit(47bv64, 224bv64);call #Ultimate.allocInit(13bv64, 225bv64);call #Ultimate.allocInit(28bv64, 226bv64);call #Ultimate.allocInit(232bv64, 227bv64);call #Ultimate.allocInit(56bv64, 228bv64);call #Ultimate.allocInit(56bv64, 229bv64);call #Ultimate.allocInit(13bv64, 230bv64);call #Ultimate.allocInit(28bv64, 231bv64);call #Ultimate.allocInit(232bv64, 232bv64);call #Ultimate.allocInit(35bv64, 233bv64);call #Ultimate.allocInit(35bv64, 234bv64);call #Ultimate.allocInit(47bv64, 235bv64);call #Ultimate.allocInit(13bv64, 236bv64);call #Ultimate.allocInit(28bv64, 237bv64);call #Ultimate.allocInit(232bv64, 238bv64);call #Ultimate.allocInit(26bv64, 239bv64);call #Ultimate.allocInit(26bv64, 240bv64);call #Ultimate.allocInit(47bv64, 241bv64);call #Ultimate.allocInit(13bv64, 242bv64);call #Ultimate.allocInit(25bv64, 243bv64);call #Ultimate.allocInit(232bv64, 244bv64);call #Ultimate.allocInit(39bv64, 245bv64);call #Ultimate.allocInit(39bv64, 246bv64);call #Ultimate.allocInit(34bv64, 247bv64);call #Ultimate.allocInit(25bv64, 248bv64);call #Ultimate.allocInit(35bv64, 249bv64);call #Ultimate.allocInit(60bv64, 250bv64);call #Ultimate.allocInit(63bv64, 251bv64);call #Ultimate.allocInit(64bv64, 252bv64);call #Ultimate.allocInit(13bv64, 253bv64);call #Ultimate.allocInit(25bv64, 254bv64);call #Ultimate.allocInit(232bv64, 255bv64);call #Ultimate.allocInit(2bv64, 256bv64);call write~init~intINTTYPE1(46bv8, 256bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 256bv64, 1bv64, 1bv64);call #Ultimate.allocInit(2bv64, 257bv64);call write~init~intINTTYPE1(46bv8, 257bv64, 0bv64, 1bv64);call write~init~intINTTYPE1(0bv8, 257bv64, 1bv64, 1bv64);call #Ultimate.allocInit(42bv64, 258bv64);call #Ultimate.allocInit(53bv64, 259bv64);call #Ultimate.allocInit(25bv64, 260bv64);call #Ultimate.allocInit(13bv64, 261bv64);call #Ultimate.allocInit(25bv64, 262bv64);call #Ultimate.allocInit(232bv64, 263bv64);call #Ultimate.allocInit(39bv64, 264bv64);call #Ultimate.allocInit(39bv64, 265bv64);call #Ultimate.allocInit(23bv64, 266bv64);call #Ultimate.allocInit(13bv64, 267bv64);call #Ultimate.allocInit(24bv64, 268bv64);call #Ultimate.allocInit(232bv64, 269bv64);call #Ultimate.allocInit(32bv64, 270bv64);call #Ultimate.allocInit(32bv64, 271bv64);call #Ultimate.allocInit(40bv64, 272bv64);call #Ultimate.allocInit(21bv64, 273bv64);call #Ultimate.allocInit(45bv64, 274bv64);call #Ultimate.allocInit(22bv64, 275bv64);call #Ultimate.allocInit(23bv64, 276bv64);call #Ultimate.allocInit(13bv64, 277bv64);call #Ultimate.allocInit(23bv64, 278bv64);call #Ultimate.allocInit(232bv64, 279bv64);call #Ultimate.allocInit(24bv64, 280bv64);call #Ultimate.allocInit(38bv64, 281bv64);call #Ultimate.allocInit(13bv64, 282bv64);call #Ultimate.allocInit(23bv64, 283bv64);call #Ultimate.allocInit(232bv64, 284bv64);call #Ultimate.allocInit(30bv64, 285bv64);call #Ultimate.allocInit(44bv64, 286bv64);call #Ultimate.allocInit(23bv64, 287bv64);call #Ultimate.allocInit(13bv64, 288bv64);call #Ultimate.allocInit(27bv64, 289bv64);call #Ultimate.allocInit(232bv64, 290bv64);call #Ultimate.allocInit(20bv64, 291bv64);call #Ultimate.allocInit(20bv64, 292bv64);call #Ultimate.allocInit(13bv64, 293bv64);call #Ultimate.allocInit(27bv64, 294bv64);call #Ultimate.allocInit(232bv64, 295bv64);call #Ultimate.allocInit(15bv64, 296bv64);call #Ultimate.allocInit(15bv64, 297bv64);call #Ultimate.allocInit(13bv64, 298bv64);call #Ultimate.allocInit(27bv64, 299bv64);call #Ultimate.allocInit(232bv64, 300bv64);call #Ultimate.allocInit(16bv64, 301bv64);call #Ultimate.allocInit(16bv64, 302bv64);call #Ultimate.allocInit(13bv64, 303bv64);call #Ultimate.allocInit(27bv64, 304bv64);call #Ultimate.allocInit(232bv64, 305bv64);call #Ultimate.allocInit(26bv64, 306bv64);call #Ultimate.allocInit(26bv64, 307bv64);call #Ultimate.allocInit(22bv64, 308bv64);call #Ultimate.allocInit(23bv64, 309bv64);call #Ultimate.allocInit(13bv64, 310bv64);call #Ultimate.allocInit(27bv64, 311bv64);call #Ultimate.allocInit(232bv64, 312bv64);call #Ultimate.allocInit(32bv64, 313bv64);call #Ultimate.allocInit(32bv64, 314bv64);call #Ultimate.allocInit(23bv64, 315bv64);call #Ultimate.allocInit(26bv64, 316bv64);call #Ultimate.allocInit(13bv64, 317bv64);call #Ultimate.allocInit(18bv64, 318bv64);call #Ultimate.allocInit(232bv64, 319bv64);call #Ultimate.allocInit(33bv64, 320bv64);call #Ultimate.allocInit(33bv64, 321bv64);call #Ultimate.allocInit(25bv64, 322bv64);call #Ultimate.allocInit(36bv64, 323bv64);call #Ultimate.allocInit(21bv64, 324bv64);call #Ultimate.allocInit(18bv64, 325bv64);call #Ultimate.allocInit(16bv64, 326bv64);call #Ultimate.allocInit(21bv64, 327bv64);call #Ultimate.allocInit(18bv64, 328bv64);call #Ultimate.allocInit(16bv64, 329bv64);call #Ultimate.allocInit(13bv64, 330bv64);call #Ultimate.allocInit(18bv64, 331bv64);call #Ultimate.allocInit(232bv64, 332bv64);call #Ultimate.allocInit(51bv64, 333bv64);call #Ultimate.allocInit(51bv64, 334bv64);call #Ultimate.allocInit(13bv64, 335bv64);call #Ultimate.allocInit(21bv64, 336bv64);call #Ultimate.allocInit(232bv64, 337bv64);call #Ultimate.allocInit(33bv64, 338bv64);call #Ultimate.allocInit(33bv64, 339bv64);call #Ultimate.allocInit(44bv64, 340bv64);call #Ultimate.allocInit(10bv64, 341bv64);call #Ultimate.allocInit(43bv64, 342bv64);call #Ultimate.allocInit(13bv64, 343bv64);call #Ultimate.allocInit(23bv64, 344bv64);call #Ultimate.allocInit(232bv64, 345bv64);call #Ultimate.allocInit(26bv64, 346bv64);call #Ultimate.allocInit(26bv64, 347bv64);call #Ultimate.allocInit(23bv64, 348bv64);call #Ultimate.allocInit(13bv64, 349bv64);call #Ultimate.allocInit(25bv64, 350bv64);call #Ultimate.allocInit(232bv64, 351bv64);call #Ultimate.allocInit(21bv64, 352bv64);call #Ultimate.allocInit(35bv64, 353bv64);call #Ultimate.allocInit(13bv64, 354bv64);call #Ultimate.allocInit(40bv64, 355bv64);call #Ultimate.allocInit(13bv64, 356bv64);call #Ultimate.allocInit(25bv64, 357bv64);call #Ultimate.allocInit(232bv64, 358bv64);call #Ultimate.allocInit(39bv64, 359bv64);call #Ultimate.allocInit(53bv64, 360bv64);~ldv_irq_1_3~0 := 0bv32;~ldv_irq_data_1_1~0.base, ~ldv_irq_data_1_1~0.offset := 0bv64, 0bv64;~ldv_irq_1_0~0 := 0bv32;~ldv_irq_data_1_0~0.base, ~ldv_irq_data_1_0~0.offset := 0bv64, 0bv64;~ldv_state_variable_0~0 := 0bv32;~ldv_state_variable_2~0 := 0bv32;~ldv_irq_data_1_3~0.base, ~ldv_irq_data_1_3~0.offset := 0bv64, 0bv64;~pcie_ops_group1~0.base, ~pcie_ops_group1~0.offset := 0bv64, 0bv64;~mwifiex_pcie_pm_ops_group1~0.base, ~mwifiex_pcie_pm_ops_group1~0.offset := 0bv64, 0bv64;~ldv_irq_data_1_2~0.base, ~ldv_irq_data_1_2~0.offset := 0bv64, 0bv64;~pcie_ops_group0~0.base, ~pcie_ops_group0~0.offset := 0bv64, 0bv64;~ldv_irq_1_2~0 := 0bv32;~LDV_IN_INTERRUPT~0 := 1bv32;~ldv_irq_1_1~0 := 0bv32;~ldv_irq_line_1_3~0 := 0bv32;~ldv_state_variable_3~0 := 0bv32;~ldv_irq_line_1_0~0 := 0bv32;~ref_cnt~0 := 0bv32;~ldv_irq_line_1_1~0 := 0bv32;~ldv_state_variable_1~0 := 0bv32;~ldv_irq_line_1_2~0 := 0bv32;~ldv_state_variable_4~0 := 0bv32;~mwifiex_pcie_group0~0.base, ~mwifiex_pcie_group0~0.offset := 0bv64, 0bv64;~#mwifiex_reg_8766~0.base, ~#mwifiex_reg_8766~0.offset := 361bv64, 0bv64;call #Ultimate.allocInit(66bv64, 361bv64);call write~init~intINTTYPE2(3088bv16, ~#mwifiex_reg_8766~0.base, ~#mwifiex_reg_8766~0.offset, 2bv64);call write~init~intINTTYPE2(3092bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(2bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3140bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(4bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3136bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(6bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3280bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(8bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3284bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(10bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3288bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(12bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3292bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(14bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3296bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(16bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3300bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(18bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3304bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(20bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3308bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(22bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(3312bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(24bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE2(0bv16, ~#mwifiex_reg_8766~0.base, ~bvadd64(26bv64, ~#mwifiex_reg_8766~0.offset), 2bv64);call write~init~intINTTYPE4(63bv32, ~#mwifiex_reg_8766~0.base, ~bvadd64(28bv64, ~#mwifiex_reg_8766~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_reg_8766~0.base, ~bvadd64(32bv64, ~#mwifiex_reg_8766~0.offset), 4bv64);call write~init~intINTTYPE4(63bv32, ~#mwifiex_reg_8766~0.base, ~bvadd64(36bv64, ~#mwifiex_reg_8766~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_reg_8766~0.base, ~bvadd64(40bv64, ~#mwifiex_reg_8766~0.offset), 4bv64);call write~init~intINTTYPE4(128bv32, ~#mwifiex_reg_8766~0.base, ~bvadd64(44bv64, ~#mwifiex_reg_8766~0.offset), 4bv64);call write~init~intINTTYPE4(128bv32, ~#mwifiex_reg_8766~0.base, ~bvadd64(48bv64, ~#mwifiex_reg_8766~0.offset), 4bv64);call write~init~intINTTYPE4(128bv32, ~#mwifiex_reg_8766~0.base, ~bvadd64(52bv64, ~#mwifiex_reg_8766~0.offset), 4bv64);call write~init~intINTTYPE1(0bv8, ~#mwifiex_reg_8766~0.base, ~bvadd64(56bv64, ~#mwifiex_reg_8766~0.offset), 1bv64);call write~init~intINTTYPE1(0bv8, ~#mwifiex_reg_8766~0.base, ~bvadd64(57bv64, ~#mwifiex_reg_8766~0.offset), 1bv64);call write~init~intINTTYPE1(0bv8, ~#mwifiex_reg_8766~0.base, ~bvadd64(58bv64, ~#mwifiex_reg_8766~0.offset), 1bv64);call write~init~intINTTYPE1(0bv8, ~#mwifiex_reg_8766~0.base, ~bvadd64(59bv64, ~#mwifiex_reg_8766~0.offset), 1bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_reg_8766~0.base, ~bvadd64(60bv64, ~#mwifiex_reg_8766~0.offset), 4bv64);call write~init~intINTTYPE1(0bv8, ~#mwifiex_reg_8766~0.base, ~bvadd64(64bv64, ~#mwifiex_reg_8766~0.offset), 1bv64);call write~init~intINTTYPE1(1bv8, ~#mwifiex_reg_8766~0.base, ~bvadd64(65bv64, ~#mwifiex_reg_8766~0.offset), 1bv64);~#mwifiex_reg_8897~0.base, ~#mwifiex_reg_8897~0.offset := 362bv64, 0bv64;call #Ultimate.allocInit(66bv64, 362bv64);call write~init~intINTTYPE2(3088bv16, ~#mwifiex_reg_8897~0.base, ~#mwifiex_reg_8897~0.offset, 2bv64);call write~init~intINTTYPE2(3092bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(2bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(3140bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(4bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(3136bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(6bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(3280bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(8bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(3284bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(10bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(49292bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(12bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(49244bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(14bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(49244bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(16bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(49292bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(18bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(3304bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(20bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(3308bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(22bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(3312bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(24bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE2(16bv16, ~#mwifiex_reg_8897~0.base, ~bvadd64(26bv64, ~#mwifiex_reg_8897~0.offset), 2bv64);call write~init~intINTTYPE4(67043328bv32, ~#mwifiex_reg_8897~0.base, ~bvadd64(28bv64, ~#mwifiex_reg_8897~0.offset), 4bv64);call write~init~intINTTYPE4(134152192bv32, ~#mwifiex_reg_8897~0.base, ~bvadd64(32bv64, ~#mwifiex_reg_8897~0.offset), 4bv64);call write~init~intINTTYPE4(1023bv32, ~#mwifiex_reg_8897~0.base, ~bvadd64(36bv64, ~#mwifiex_reg_8897~0.offset), 4bv64);call write~init~intINTTYPE4(2047bv32, ~#mwifiex_reg_8897~0.base, ~bvadd64(40bv64, ~#mwifiex_reg_8897~0.offset), 4bv64);call write~init~intINTTYPE4(67108864bv32, ~#mwifiex_reg_8897~0.base, ~bvadd64(44bv64, ~#mwifiex_reg_8897~0.offset), 4bv64);call write~init~intINTTYPE4(1024bv32, ~#mwifiex_reg_8897~0.base, ~bvadd64(48bv64, ~#mwifiex_reg_8897~0.offset), 4bv64);call write~init~intINTTYPE4(128bv32, ~#mwifiex_reg_8897~0.base, ~bvadd64(52bv64, ~#mwifiex_reg_8897~0.offset), 4bv64);call write~init~intINTTYPE1(1bv8, ~#mwifiex_reg_8897~0.base, ~bvadd64(56bv64, ~#mwifiex_reg_8897~0.offset), 1bv64);call write~init~intINTTYPE1(2bv8, ~#mwifiex_reg_8897~0.base, ~bvadd64(57bv64, ~#mwifiex_reg_8897~0.offset), 1bv64);call write~init~intINTTYPE1(4bv8, ~#mwifiex_reg_8897~0.base, ~bvadd64(58bv64, ~#mwifiex_reg_8897~0.offset), 1bv64);call write~init~intINTTYPE1(8bv8, ~#mwifiex_reg_8897~0.base, ~bvadd64(59bv64, ~#mwifiex_reg_8897~0.offset), 1bv64);call write~init~intINTTYPE4(65536bv32, ~#mwifiex_reg_8897~0.base, ~bvadd64(60bv64, ~#mwifiex_reg_8897~0.offset), 4bv64);call write~init~intINTTYPE1(1bv8, ~#mwifiex_reg_8897~0.base, ~bvadd64(64bv64, ~#mwifiex_reg_8897~0.offset), 1bv64);call write~init~intINTTYPE1(0bv8, ~#mwifiex_reg_8897~0.base, ~bvadd64(65bv64, ~#mwifiex_reg_8897~0.offset), 1bv64);~#mwifiex_pcie8766~0.base, ~#mwifiex_pcie8766~0.offset := 363bv64, 0bv64;call #Ultimate.allocInit(20bv64, 363bv64);call write~init~$Pointer$(6bv64, 0bv64, ~#mwifiex_pcie8766~0.base, ~#mwifiex_pcie8766~0.offset, 8bv64);call write~init~$Pointer$(~#mwifiex_reg_8766~0.base, ~#mwifiex_reg_8766~0.offset, ~#mwifiex_pcie8766~0.base, ~bvadd64(8bv64, ~#mwifiex_pcie8766~0.offset), 8bv64);call write~init~intINTTYPE2(256bv16, ~#mwifiex_pcie8766~0.base, ~bvadd64(16bv64, ~#mwifiex_pcie8766~0.offset), 2bv64);call write~init~intINTTYPE2(2048bv16, ~#mwifiex_pcie8766~0.base, ~bvadd64(18bv64, ~#mwifiex_pcie8766~0.offset), 2bv64);~#mwifiex_pcie8897~0.base, ~#mwifiex_pcie8897~0.offset := 364bv64, 0bv64;call #Ultimate.allocInit(20bv64, 364bv64);call write~init~$Pointer$(7bv64, 0bv64, ~#mwifiex_pcie8897~0.base, ~#mwifiex_pcie8897~0.offset, 8bv64);call write~init~$Pointer$(~#mwifiex_reg_8897~0.base, ~#mwifiex_reg_8897~0.offset, ~#mwifiex_pcie8897~0.base, ~bvadd64(8bv64, ~#mwifiex_pcie8897~0.offset), 8bv64);call write~init~intINTTYPE2(256bv16, ~#mwifiex_pcie8897~0.base, ~bvadd64(16bv64, ~#mwifiex_pcie8897~0.offset), 2bv64);call write~init~intINTTYPE2(4096bv16, ~#mwifiex_pcie8897~0.base, ~bvadd64(18bv64, ~#mwifiex_pcie8897~0.offset), 2bv64);~user_rmmod~0 := 0bv8;~#add_remove_card_sem~0.base, ~#add_remove_card_sem~0.offset := 365bv64, 0bv64;call #Ultimate.allocInit(84bv64, 365bv64);#memory_int := ~initToZeroAtPointerBaseAddress~int(#memory_int, ~#add_remove_card_sem~0.base);#memory_$Pointer$.base, #memory_$Pointer$.offset := ~initToZeroAtPointerBaseAddress~$Pointer$.base(#memory_$Pointer$.base, #memory_$Pointer$.offset, ~#add_remove_card_sem~0.base), ~initToZeroAtPointerBaseAddress~$Pointer$.offset(#memory_$Pointer$.base, #memory_$Pointer$.offset, ~#add_remove_card_sem~0.base);~#mwifiex_ids~0.base, ~#mwifiex_ids~0.offset := 366bv64, 0bv64;call #Ultimate.allocInit(96bv64, 366bv64);call write~init~intINTTYPE4(4523bv32, ~#mwifiex_ids~0.base, ~#mwifiex_ids~0.offset, 4bv64);call write~init~intINTTYPE4(11056bv32, ~#mwifiex_ids~0.base, ~bvadd64(4bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#mwifiex_ids~0.base, ~bvadd64(8bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#mwifiex_ids~0.base, ~bvadd64(12bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(16bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(20bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE8(~bvadd64(~#mwifiex_pcie8766~0.base, ~#mwifiex_pcie8766~0.offset), ~#mwifiex_ids~0.base, ~bvadd64(24bv64, ~#mwifiex_ids~0.offset), 8bv64);call write~init~intINTTYPE4(4523bv32, ~#mwifiex_ids~0.base, ~bvadd64(32bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(11064bv32, ~#mwifiex_ids~0.base, ~bvadd64(36bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#mwifiex_ids~0.base, ~bvadd64(40bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(4294967295bv32, ~#mwifiex_ids~0.base, ~bvadd64(44bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(48bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(52bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE8(~bvadd64(~#mwifiex_pcie8897~0.base, ~#mwifiex_pcie8897~0.offset), ~#mwifiex_ids~0.base, ~bvadd64(56bv64, ~#mwifiex_ids~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(64bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(68bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(72bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(76bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(80bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_ids~0.base, ~bvadd64(84bv64, ~#mwifiex_ids~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#mwifiex_ids~0.base, ~bvadd64(88bv64, ~#mwifiex_ids~0.offset), 8bv64);~__mod_pci__mwifiex_ids_device_table~0.vendor := 0bv32;~__mod_pci__mwifiex_ids_device_table~0.device := 0bv32;~__mod_pci__mwifiex_ids_device_table~0.subvendor := 0bv32;~__mod_pci__mwifiex_ids_device_table~0.subdevice := 0bv32;~__mod_pci__mwifiex_ids_device_table~0.class := 0bv32;~__mod_pci__mwifiex_ids_device_table~0.class_mask := 0bv32;~__mod_pci__mwifiex_ids_device_table~0.driver_data := 0bv64;~#mwifiex_pcie_pm_ops~0.base, ~#mwifiex_pcie_pm_ops~0.offset := 367bv64, 0bv64;call #Ultimate.allocInit(184bv64, 367bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~#mwifiex_pcie_pm_ops~0.offset, 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(8bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_suspend.base, #funAddr~mwifiex_pcie_suspend.offset, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(16bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_resume.base, #funAddr~mwifiex_pcie_resume.offset, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(24bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_suspend.base, #funAddr~mwifiex_pcie_suspend.offset, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(32bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_resume.base, #funAddr~mwifiex_pcie_resume.offset, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(40bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_suspend.base, #funAddr~mwifiex_pcie_suspend.offset, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(48bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_resume.base, #funAddr~mwifiex_pcie_resume.offset, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(56bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(64bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(72bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(80bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(88bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(96bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(104bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(112bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(120bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(128bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(136bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(144bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(152bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(160bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(168bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie_pm_ops~0.base, ~bvadd64(176bv64, ~#mwifiex_pcie_pm_ops~0.offset), 8bv64);~#mwifiex_pcie~0.base, ~#mwifiex_pcie~0.offset := 368bv64, 0bv64;call #Ultimate.allocInit(301bv64, 368bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~#mwifiex_pcie~0.offset, 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(8bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(26bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(16bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(~#mwifiex_ids~0.base, ~#mwifiex_ids~0.offset, ~#mwifiex_pcie~0.base, ~bvadd64(24bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_probe.base, #funAddr~mwifiex_pcie_probe.offset, ~#mwifiex_pcie~0.base, ~bvadd64(32bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_remove.base, #funAddr~mwifiex_pcie_remove.offset, ~#mwifiex_pcie~0.base, ~bvadd64(40bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(48bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(56bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(64bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(72bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_shutdown.base, #funAddr~mwifiex_pcie_shutdown.offset, ~#mwifiex_pcie~0.base, ~bvadd64(80bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(88bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(96bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(104bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(112bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(120bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(128bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~intINTTYPE1(0bv8, ~#mwifiex_pcie~0.base, ~bvadd64(136bv64, ~#mwifiex_pcie~0.offset), 1bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(137bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(145bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(153bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(161bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(169bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(177bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(185bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(193bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(~#mwifiex_pcie_pm_ops~0.base, ~#mwifiex_pcie_pm_ops~0.offset, ~#mwifiex_pcie~0.base, ~bvadd64(201bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(209bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_pcie~0.base, ~bvadd64(217bv64, ~#mwifiex_pcie~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_pcie~0.base, ~bvadd64(221bv64, ~#mwifiex_pcie~0.offset), 4bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_pcie~0.base, ~bvadd64(225bv64, ~#mwifiex_pcie~0.offset), 4bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(229bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(237bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(245bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(253bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(261bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~intINTTYPE4(0bv32, ~#mwifiex_pcie~0.base, ~bvadd64(269bv64, ~#mwifiex_pcie~0.offset), 4bv64);call write~init~intINTTYPE8(0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(273bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(285bv64, ~#mwifiex_pcie~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#mwifiex_pcie~0.base, ~bvadd64(293bv64, ~#mwifiex_pcie~0.offset), 8bv64);~#pcie_ops~0.base, ~#pcie_ops~0.offset := 369bv64, 0bv64;call #Ultimate.allocInit(176bv64, 369bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_init.base, #funAddr~mwifiex_pcie_init.offset, ~#pcie_ops~0.base, ~#pcie_ops~0.offset, 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_cleanup.base, #funAddr~mwifiex_pcie_cleanup.offset, ~#pcie_ops~0.base, ~bvadd64(8bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_check_fw_status.base, #funAddr~mwifiex_check_fw_status.offset, ~#pcie_ops~0.base, ~bvadd64(16bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_prog_fw_w_helper.base, #funAddr~mwifiex_prog_fw_w_helper.offset, ~#pcie_ops~0.base, ~bvadd64(24bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_register_dev.base, #funAddr~mwifiex_register_dev.offset, ~#pcie_ops~0.base, ~bvadd64(32bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_unregister_dev.base, #funAddr~mwifiex_unregister_dev.offset, ~#pcie_ops~0.base, ~bvadd64(40bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_enable_host_int.base, #funAddr~mwifiex_pcie_enable_host_int.offset, ~#pcie_ops~0.base, ~bvadd64(48bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#pcie_ops~0.base, ~bvadd64(56bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_process_int_status.base, #funAddr~mwifiex_process_int_status.offset, ~#pcie_ops~0.base, ~bvadd64(64bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_host_to_card.base, #funAddr~mwifiex_pcie_host_to_card.offset, ~#pcie_ops~0.base, ~bvadd64(72bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pm_wakeup_card.base, #funAddr~mwifiex_pm_wakeup_card.offset, ~#pcie_ops~0.base, ~bvadd64(80bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pm_wakeup_card_complete.base, #funAddr~mwifiex_pm_wakeup_card_complete.offset, ~#pcie_ops~0.base, ~bvadd64(88bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#pcie_ops~0.base, ~bvadd64(96bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#pcie_ops~0.base, ~bvadd64(104bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_cmdrsp_complete.base, #funAddr~mwifiex_pcie_cmdrsp_complete.offset, ~#pcie_ops~0.base, ~bvadd64(112bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_event_complete.base, #funAddr~mwifiex_pcie_event_complete.offset, ~#pcie_ops~0.base, ~bvadd64(120bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#pcie_ops~0.base, ~bvadd64(128bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_pcie_init_fw_port.base, #funAddr~mwifiex_pcie_init_fw_port.offset, ~#pcie_ops~0.base, ~bvadd64(136bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#pcie_ops~0.base, ~bvadd64(144bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#pcie_ops~0.base, ~bvadd64(152bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(0bv64, 0bv64, ~#pcie_ops~0.base, ~bvadd64(160bv64, ~#pcie_ops~0.offset), 8bv64);call write~init~$Pointer$(#funAddr~mwifiex_clean_pcie_ring_buf.base, #funAddr~mwifiex_clean_pcie_ring_buf.offset, ~#pcie_ops~0.base, ~bvadd64(168bv64, ~#pcie_ops~0.offset), 8bv64);~ldv_retval_20~0 := 0bv32;~ldv_retval_18~0 := 0bv32;~ldv_retval_2~0 := 0bv32;~ldv_retval_5~0 := 0bv32;~ldv_retval_0~0 := 0bv32;~ldv_retval_11~0 := 0bv32;~ldv_retval_1~0 := 0bv32;~ldv_retval_15~0 := 0bv32;~ldv_retval_16~0 := 0bv32;~ldv_retval_8~0 := 0bv32;~ldv_retval_7~0 := 0bv32;~ldv_retval_19~0 := 0bv32;~ldv_retval_14~0 := 0bv32;~ldv_retval_17~0 := 0bv32;~ldv_retval_12~0 := 0bv32;~ldv_retval_6~0 := 0bv32;~ldv_retval_13~0 := 0bv32;~ldv_retval_9~0 := 0bv32;~ldv_retval_10~0 := 0bv32;~ldv_retval_4~0 := 0bv32;~ldv_retval_3~0 := 0bv32;~#set_impl~0.base, ~#set_impl~0.offset := 370bv64, 0bv64;call #Ultimate.allocInit(120bv64, 370bv64);#memory_$Pointer$.base, #memory_$Pointer$.offset := ~initToZeroAtPointerBaseAddress~$Pointer$.base(#memory_$Pointer$.base, #memory_$Pointer$.offset, ~#set_impl~0.base), ~initToZeroAtPointerBaseAddress~$Pointer$.offset(#memory_$Pointer$.base, #memory_$Pointer$.offset, ~#set_impl~0.base);~last_index~0 := 0bv32;~LDV_SKBS~0.base, ~LDV_SKBS~0.offset := 0bv64, 0bv64; {1565#true} is VALID [2022-02-20 21:57:11,851 INFO L290 TraceCheckUtils]: 1: Hoare triple {1565#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret1307#1.base, main_#t~ret1307#1.offset, main_#t~ret1308#1.base, main_#t~ret1308#1.offset, main_#t~ret1309#1, main_#t~ret1310#1.base, main_#t~ret1310#1.offset, main_#t~ret1311#1, main_#t~nondet1312#1, main_#t~switch1313#1, main_#t~nondet1314#1, main_#t~switch1315#1, main_#t~ret1316#1, main_#t~ret1317#1, main_#t~ret1318#1, main_#t~ret1319#1, main_#t~ret1320#1, main_#t~ret1321#1, main_#t~ret1322#1, main_#t~ret1323#1, main_#t~ret1324#1, main_#t~ret1325#1, main_#t~ret1326#1, main_#t~ret1327#1, main_#t~ret1328#1, main_#t~ret1329#1, main_#t~ret1330#1, main_#t~ret1331#1, main_#t~ret1332#1, main_#t~ret1333#1, main_#t~ret1334#1, main_#t~ret1335#1, main_#t~nondet1336#1, main_#t~switch1337#1, main_#t~ret1338#1, main_#t~nondet1339#1, main_#t~switch1340#1, main_#t~ret1341#1, main_#t~nondet1342#1, main_#t~switch1343#1, main_#t~ret1344#1, main_#t~ret1345#1, main_#t~ret1346#1, main_#t~ret1347#1, main_#t~ret1348#1, main_#t~ret1349#1, main_#t~ret1350#1, main_#t~ret1351#1, main_#t~ret1352#1, main_#t~ret1353#1, main_#t~ret1354#1, main_#t~ret1355#1, main_#t~ret1356#1, main_~ldvarg0~0#1.base, main_~ldvarg0~0#1.offset, main_~tmp~68#1.base, main_~tmp~68#1.offset, main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset, main_~tmp___0~38#1.base, main_~tmp___0~38#1.offset, main_~ldvarg4~0#1, main_~tmp___1~22#1, main_~ldvarg3~0#1.base, main_~ldvarg3~0#1.offset, main_~tmp___2~17#1.base, main_~tmp___2~17#1.offset, main_~ldvarg2~0#1, main_~tmp___3~13#1, main_~tmp___4~10#1, main_~tmp___5~6#1, main_~tmp___6~6#1, main_~tmp___7~4#1, main_~tmp___8~2#1;havoc main_~ldvarg0~0#1.base, main_~ldvarg0~0#1.offset;havoc main_~tmp~68#1.base, main_~tmp~68#1.offset;havoc main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset;havoc main_~tmp___0~38#1.base, main_~tmp___0~38#1.offset;havoc main_~ldvarg4~0#1;havoc main_~tmp___1~22#1;havoc main_~ldvarg3~0#1.base, main_~ldvarg3~0#1.offset;havoc main_~tmp___2~17#1.base, main_~tmp___2~17#1.offset;havoc main_~ldvarg2~0#1;havoc main_~tmp___3~13#1;havoc main_~tmp___4~10#1;havoc main_~tmp___5~6#1;havoc main_~tmp___6~6#1;havoc main_~tmp___7~4#1;havoc main_~tmp___8~2#1; {1565#true} is VALID [2022-02-20 21:57:11,851 INFO L272 TraceCheckUtils]: 2: Hoare triple {1565#true} call main_#t~ret1307#1.base, main_#t~ret1307#1.offset := ldv_zalloc(32bv64); {1565#true} is VALID [2022-02-20 21:57:11,851 INFO L290 TraceCheckUtils]: 3: Hoare triple {1565#true} ~size#1 := #in~size#1;havoc ~p~1#1.base, ~p~1#1.offset;havoc ~tmp~12#1.base, ~tmp~12#1.offset;havoc ~tmp___0~6#1;~tmp___0~6#1 := #t~nondet159#1;havoc #t~nondet159#1; {1565#true} is VALID [2022-02-20 21:57:11,851 INFO L290 TraceCheckUtils]: 4: Hoare triple {1565#true} assume 0bv32 != ~tmp___0~6#1;#res#1.base, #res#1.offset := 0bv64, 0bv64; {1565#true} is VALID [2022-02-20 21:57:11,852 INFO L290 TraceCheckUtils]: 5: Hoare triple {1565#true} assume true; {1565#true} is VALID [2022-02-20 21:57:11,852 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1565#true} {1565#true} #4105#return; {1565#true} is VALID [2022-02-20 21:57:11,852 INFO L290 TraceCheckUtils]: 7: Hoare triple {1565#true} main_~tmp~68#1.base, main_~tmp~68#1.offset := main_#t~ret1307#1.base, main_#t~ret1307#1.offset;havoc main_#t~ret1307#1.base, main_#t~ret1307#1.offset;main_~ldvarg0~0#1.base, main_~ldvarg0~0#1.offset := main_~tmp~68#1.base, main_~tmp~68#1.offset; {1565#true} is VALID [2022-02-20 21:57:11,852 INFO L272 TraceCheckUtils]: 8: Hoare triple {1565#true} call main_#t~ret1308#1.base, main_#t~ret1308#1.offset := ldv_zalloc(4bv64); {1565#true} is VALID [2022-02-20 21:57:11,852 INFO L290 TraceCheckUtils]: 9: Hoare triple {1565#true} ~size#1 := #in~size#1;havoc ~p~1#1.base, ~p~1#1.offset;havoc ~tmp~12#1.base, ~tmp~12#1.offset;havoc ~tmp___0~6#1;~tmp___0~6#1 := #t~nondet159#1;havoc #t~nondet159#1; {1565#true} is VALID [2022-02-20 21:57:11,852 INFO L290 TraceCheckUtils]: 10: Hoare triple {1565#true} assume 0bv32 != ~tmp___0~6#1;#res#1.base, #res#1.offset := 0bv64, 0bv64; {1565#true} is VALID [2022-02-20 21:57:11,853 INFO L290 TraceCheckUtils]: 11: Hoare triple {1565#true} assume true; {1565#true} is VALID [2022-02-20 21:57:11,853 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {1565#true} {1565#true} #4107#return; {1565#true} is VALID [2022-02-20 21:57:11,853 INFO L290 TraceCheckUtils]: 13: Hoare triple {1565#true} main_~tmp___0~38#1.base, main_~tmp___0~38#1.offset := main_#t~ret1308#1.base, main_#t~ret1308#1.offset;havoc main_#t~ret1308#1.base, main_#t~ret1308#1.offset;main_~ldvarg1~0#1.base, main_~ldvarg1~0#1.offset := main_~tmp___0~38#1.base, main_~tmp___0~38#1.offset;call main_#t~ret1309#1 := __VERIFIER_nondet_u32();main_~tmp___1~22#1 := main_#t~ret1309#1;havoc main_#t~ret1309#1;main_~ldvarg4~0#1 := main_~tmp___1~22#1; {1565#true} is VALID [2022-02-20 21:57:11,853 INFO L272 TraceCheckUtils]: 14: Hoare triple {1565#true} call main_#t~ret1310#1.base, main_#t~ret1310#1.offset := ldv_zalloc(32bv64); {1565#true} is VALID [2022-02-20 21:57:11,853 INFO L290 TraceCheckUtils]: 15: Hoare triple {1565#true} ~size#1 := #in~size#1;havoc ~p~1#1.base, ~p~1#1.offset;havoc ~tmp~12#1.base, ~tmp~12#1.offset;havoc ~tmp___0~6#1;~tmp___0~6#1 := #t~nondet159#1;havoc #t~nondet159#1; {1565#true} is VALID [2022-02-20 21:57:11,857 INFO L290 TraceCheckUtils]: 16: Hoare triple {1565#true} assume 0bv32 != ~tmp___0~6#1;#res#1.base, #res#1.offset := 0bv64, 0bv64; {1565#true} is VALID [2022-02-20 21:57:11,858 INFO L290 TraceCheckUtils]: 17: Hoare triple {1565#true} assume true; {1565#true} is VALID [2022-02-20 21:57:11,858 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {1565#true} {1565#true} #4109#return; {1565#true} is VALID [2022-02-20 21:57:11,858 INFO L290 TraceCheckUtils]: 19: Hoare triple {1565#true} main_~tmp___2~17#1.base, main_~tmp___2~17#1.offset := main_#t~ret1310#1.base, main_#t~ret1310#1.offset;havoc main_#t~ret1310#1.base, main_#t~ret1310#1.offset;main_~ldvarg3~0#1.base, main_~ldvarg3~0#1.offset := main_~tmp___2~17#1.base, main_~tmp___2~17#1.offset;call main_#t~ret1311#1 := __VERIFIER_nondet_u8();main_~tmp___3~13#1 := main_#t~ret1311#1;havoc main_#t~ret1311#1;main_~ldvarg2~0#1 := main_~tmp___3~13#1;assume { :begin_inline_ldv_initialize } true;assume { :begin_inline_ldv_set_init } true;ldv_set_init_#in~set#1.base, ldv_set_init_#in~set#1.offset := ~LDV_SKBS~0.base, ~LDV_SKBS~0.offset;havoc ldv_set_init_~set#1.base, ldv_set_init_~set#1.offset;ldv_set_init_~set#1.base, ldv_set_init_~set#1.offset := ldv_set_init_#in~set#1.base, ldv_set_init_#in~set#1.offset;ldv_set_init_~set#1.base, ldv_set_init_~set#1.offset := ~#set_impl~0.base, ~#set_impl~0.offset;~last_index~0 := 0bv32; {1565#true} is VALID [2022-02-20 21:57:11,858 INFO L290 TraceCheckUtils]: 20: Hoare triple {1565#true} assume { :end_inline_ldv_set_init } true; {1565#true} is VALID [2022-02-20 21:57:11,859 INFO L290 TraceCheckUtils]: 21: Hoare triple {1565#true} assume { :end_inline_ldv_initialize } true;~ldv_state_variable_4~0 := 0bv32;~ldv_state_variable_1~0 := 1bv32;~ref_cnt~0 := 0bv32;~ldv_state_variable_0~0 := 1bv32;~ldv_state_variable_3~0 := 0bv32;~ldv_state_variable_2~0 := 0bv32; {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} is VALID [2022-02-20 21:57:11,860 INFO L290 TraceCheckUtils]: 22: Hoare triple {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} main_~tmp___4~10#1 := main_#t~nondet1312#1;havoc main_#t~nondet1312#1;main_#t~switch1313#1 := 0bv32 == main_~tmp___4~10#1; {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} is VALID [2022-02-20 21:57:11,860 INFO L290 TraceCheckUtils]: 23: Hoare triple {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} assume !main_#t~switch1313#1;main_#t~switch1313#1 := main_#t~switch1313#1 || 1bv32 == main_~tmp___4~10#1; {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} is VALID [2022-02-20 21:57:11,861 INFO L290 TraceCheckUtils]: 24: Hoare triple {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} assume !main_#t~switch1313#1;main_#t~switch1313#1 := main_#t~switch1313#1 || 2bv32 == main_~tmp___4~10#1; {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} is VALID [2022-02-20 21:57:11,861 INFO L290 TraceCheckUtils]: 25: Hoare triple {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} assume main_#t~switch1313#1; {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} is VALID [2022-02-20 21:57:11,862 INFO L290 TraceCheckUtils]: 26: Hoare triple {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} assume 0bv32 != ~ldv_state_variable_0~0;main_~tmp___6~6#1 := main_#t~nondet1336#1;havoc main_#t~nondet1336#1;main_#t~switch1337#1 := 0bv32 == main_~tmp___6~6#1; {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} is VALID [2022-02-20 21:57:11,862 INFO L290 TraceCheckUtils]: 27: Hoare triple {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} assume main_#t~switch1337#1; {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} is VALID [2022-02-20 21:57:11,862 INFO L290 TraceCheckUtils]: 28: Hoare triple {1633#(= (_ bv1 32) ~ldv_state_variable_0~0)} assume 2bv32 == ~ldv_state_variable_0~0 && 0bv32 == ~ref_cnt~0;assume { :begin_inline_mwifiex_pcie_cleanup_module } true;havoc mwifiex_pcie_cleanup_module_#t~ret1293#1, mwifiex_pcie_cleanup_module_~tmp~62#1;havoc mwifiex_pcie_cleanup_module_~tmp~62#1;assume { :begin_inline_down_interruptible } true;down_interruptible_#in~arg0#1.base, down_interruptible_#in~arg0#1.offset := ~#add_remove_card_sem~0.base, ~#add_remove_card_sem~0.offset;havoc down_interruptible_#res#1;havoc down_interruptible_#t~nondet1379#1, down_interruptible_~arg0#1.base, down_interruptible_~arg0#1.offset;down_interruptible_~arg0#1.base, down_interruptible_~arg0#1.offset := down_interruptible_#in~arg0#1.base, down_interruptible_#in~arg0#1.offset;down_interruptible_#res#1 := down_interruptible_#t~nondet1379#1;havoc down_interruptible_#t~nondet1379#1; {1566#false} is VALID [2022-02-20 21:57:11,863 INFO L290 TraceCheckUtils]: 29: Hoare triple {1566#false} mwifiex_pcie_cleanup_module_#t~ret1293#1 := down_interruptible_#res#1;assume { :end_inline_down_interruptible } true;mwifiex_pcie_cleanup_module_~tmp~62#1 := mwifiex_pcie_cleanup_module_#t~ret1293#1;havoc mwifiex_pcie_cleanup_module_#t~ret1293#1; {1566#false} is VALID [2022-02-20 21:57:11,863 INFO L290 TraceCheckUtils]: 30: Hoare triple {1566#false} assume !(0bv32 == mwifiex_pcie_cleanup_module_~tmp~62#1); {1566#false} is VALID [2022-02-20 21:57:11,864 INFO L290 TraceCheckUtils]: 31: Hoare triple {1566#false} ~user_rmmod~0 := 1bv8;assume { :begin_inline_pci_unregister_driver } true;pci_unregister_driver_#in~arg0#1.base, pci_unregister_driver_#in~arg0#1.offset := ~#mwifiex_pcie~0.base, ~#mwifiex_pcie~0.offset;havoc pci_unregister_driver_~arg0#1.base, pci_unregister_driver_~arg0#1.offset;pci_unregister_driver_~arg0#1.base, pci_unregister_driver_~arg0#1.offset := pci_unregister_driver_#in~arg0#1.base, pci_unregister_driver_#in~arg0#1.offset; {1566#false} is VALID [2022-02-20 21:57:11,864 INFO L290 TraceCheckUtils]: 32: Hoare triple {1566#false} assume { :end_inline_pci_unregister_driver } true; {1566#false} is VALID [2022-02-20 21:57:11,864 INFO L290 TraceCheckUtils]: 33: Hoare triple {1566#false} assume { :end_inline_mwifiex_pcie_cleanup_module } true;~ldv_state_variable_0~0 := 3bv32; {1566#false} is VALID [2022-02-20 21:57:11,865 INFO L290 TraceCheckUtils]: 34: Hoare triple {1566#false} assume { :begin_inline_ldv_check_final_state } true;havoc ldv_check_final_state_#t~ret1369#1, ldv_check_final_state_~tmp___7~10#1;havoc ldv_check_final_state_~tmp___7~10#1;assume { :begin_inline_ldv_set_is_empty } true;ldv_set_is_empty_#in~set#1.base, ldv_set_is_empty_#in~set#1.offset := ~LDV_SKBS~0.base, ~LDV_SKBS~0.offset;havoc ldv_set_is_empty_#res#1;havoc ldv_set_is_empty_~set#1.base, ldv_set_is_empty_~set#1.offset;ldv_set_is_empty_~set#1.base, ldv_set_is_empty_~set#1.offset := ldv_set_is_empty_#in~set#1.base, ldv_set_is_empty_#in~set#1.offset;ldv_set_is_empty_#res#1 := (if 0bv32 == ~last_index~0 then 1bv32 else 0bv32); {1566#false} is VALID [2022-02-20 21:57:11,865 INFO L290 TraceCheckUtils]: 35: Hoare triple {1566#false} ldv_check_final_state_#t~ret1369#1 := ldv_set_is_empty_#res#1;assume { :end_inline_ldv_set_is_empty } true;ldv_check_final_state_~tmp___7~10#1 := ldv_check_final_state_#t~ret1369#1;havoc ldv_check_final_state_#t~ret1369#1; {1566#false} is VALID [2022-02-20 21:57:11,865 INFO L290 TraceCheckUtils]: 36: Hoare triple {1566#false} assume !(0bv32 != ldv_check_final_state_~tmp___7~10#1); {1566#false} is VALID [2022-02-20 21:57:11,866 INFO L272 TraceCheckUtils]: 37: Hoare triple {1566#false} call ldv_error(); {1566#false} is VALID [2022-02-20 21:57:11,866 INFO L290 TraceCheckUtils]: 38: Hoare triple {1566#false} assume !false; {1566#false} is VALID [2022-02-20 21:57:11,867 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-02-20 21:57:11,867 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 21:57:11,867 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 21:57:11,867 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1235272312] [2022-02-20 21:57:11,868 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1235272312] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 21:57:11,868 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 21:57:11,868 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 21:57:11,869 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [371578730] [2022-02-20 21:57:11,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 21:57:11,874 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 39 [2022-02-20 21:57:11,875 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 21:57:11,877 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 21:57:12,039 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 21:57:12,040 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 21:57:12,040 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 21:57:12,055 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 21:57:12,056 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 21:57:12,067 INFO L87 Difference]: Start difference. First operand has 1562 states, 1189 states have (on average 1.4137931034482758) internal successors, (1681), 1210 states have internal predecessors, (1681), 315 states have call successors, (315), 57 states have call predecessors, (315), 56 states have return successors, (308), 308 states have call predecessors, (308), 308 states have call successors, (308) Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3)