./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 11:12:46,300 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 11:12:46,303 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 11:12:46,340 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 11:12:46,341 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 11:12:46,342 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 11:12:46,346 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 11:12:46,349 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 11:12:46,351 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 11:12:46,355 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 11:12:46,356 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 11:12:46,360 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 11:12:46,361 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 11:12:46,363 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 11:12:46,364 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 11:12:46,367 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 11:12:46,367 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 11:12:46,369 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 11:12:46,370 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 11:12:46,375 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 11:12:46,377 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 11:12:46,378 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 11:12:46,380 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 11:12:46,381 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 11:12:46,382 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 11:12:46,388 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 11:12:46,389 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 11:12:46,389 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 11:12:46,390 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 11:12:46,390 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 11:12:46,391 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 11:12:46,392 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 11:12:46,393 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 11:12:46,394 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 11:12:46,395 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 11:12:46,396 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 11:12:46,396 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 11:12:46,397 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 11:12:46,397 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 11:12:46,397 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 11:12:46,398 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 11:12:46,399 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 11:12:46,405 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-07-21 11:12:46,435 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 11:12:46,435 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 11:12:46,435 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 11:12:46,435 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 11:12:46,436 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 11:12:46,436 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 11:12:46,436 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 11:12:46,437 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 11:12:46,437 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 11:12:46,437 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 11:12:46,437 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-21 11:12:46,437 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 11:12:46,437 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 11:12:46,437 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 11:12:46,437 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 11:12:46,437 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 11:12:46,437 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 11:12:46,438 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 11:12:46,438 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 11:12:46,438 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 11:12:46,438 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 11:12:46,438 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 11:12:46,438 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 11:12:46,438 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 11:12:46,438 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 11:12:46,438 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-21 11:12:46,439 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-21 11:12:46,439 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 11:12:46,439 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 11:12:46,439 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 11:12:46,439 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2022-07-21 11:12:46,754 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 11:12:46,772 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 11:12:46,775 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 11:12:46,776 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 11:12:46,778 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 11:12:46,780 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-07-21 11:12:46,832 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b76f8f15d/ba75c03bfe4846afb8aaeffa2951869a/FLAG1c2784da2 [2022-07-21 11:12:47,512 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 11:12:47,513 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-07-21 11:12:47,549 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b76f8f15d/ba75c03bfe4846afb8aaeffa2951869a/FLAG1c2784da2 [2022-07-21 11:12:47,859 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b76f8f15d/ba75c03bfe4846afb8aaeffa2951869a [2022-07-21 11:12:47,861 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 11:12:47,863 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 11:12:47,865 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 11:12:47,865 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 11:12:47,868 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 11:12:47,869 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 11:12:47" (1/1) ... [2022-07-21 11:12:47,869 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@61745fd6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:47, skipping insertion in model container [2022-07-21 11:12:47,870 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 11:12:47" (1/1) ... [2022-07-21 11:12:47,876 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 11:12:47,999 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 11:12:48,717 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-07-21 11:12:49,205 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:12:49,228 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 11:12:49,377 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-07-21 11:12:49,503 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:12:49,592 INFO L208 MainTranslator]: Completed translation [2022-07-21 11:12:49,594 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49 WrapperNode [2022-07-21 11:12:49,595 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 11:12:49,596 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 11:12:49,596 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 11:12:49,596 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 11:12:49,601 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,657 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,744 INFO L137 Inliner]: procedures = 157, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2337 [2022-07-21 11:12:49,745 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 11:12:49,746 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 11:12:49,746 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 11:12:49,747 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 11:12:49,752 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,753 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,785 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,785 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,851 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,866 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,875 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,886 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 11:12:49,887 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 11:12:49,887 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 11:12:49,887 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 11:12:49,888 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (1/1) ... [2022-07-21 11:12:49,893 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 11:12:49,906 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 11:12:49,938 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 11:12:49,975 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 11:12:49,990 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-07-21 11:12:49,990 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-07-21 11:12:49,991 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-07-21 11:12:49,991 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-07-21 11:12:49,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-07-21 11:12:49,991 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2022-07-21 11:12:49,991 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2022-07-21 11:12:49,991 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2022-07-21 11:12:49,991 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2022-07-21 11:12:49,991 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2022-07-21 11:12:49,992 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2022-07-21 11:12:49,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-07-21 11:12:49,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-07-21 11:12:49,992 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-07-21 11:12:49,992 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-07-21 11:12:49,992 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-21 11:12:49,992 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-21 11:12:49,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-07-21 11:12:49,992 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-07-21 11:12:49,993 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-07-21 11:12:49,993 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-07-21 11:12:49,993 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-07-21 11:12:49,993 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2022-07-21 11:12:49,993 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2022-07-21 11:12:49,993 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-07-21 11:12:49,993 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-07-21 11:12:49,993 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-07-21 11:12:49,993 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-07-21 11:12:49,994 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-21 11:12:49,994 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-21 11:12:49,994 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-07-21 11:12:49,994 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-07-21 11:12:49,994 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-07-21 11:12:49,994 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-07-21 11:12:49,994 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2022-07-21 11:12:49,994 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2022-07-21 11:12:49,994 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-07-21 11:12:49,995 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-07-21 11:12:49,995 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-21 11:12:49,995 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-21 11:12:49,995 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-07-21 11:12:49,995 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2022-07-21 11:12:49,995 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2022-07-21 11:12:49,995 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-21 11:12:49,995 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-21 11:12:49,996 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-07-21 11:12:49,996 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-07-21 11:12:49,996 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-21 11:12:49,996 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-21 11:12:49,996 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-07-21 11:12:49,996 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-07-21 11:12:49,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-21 11:12:49,996 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-21 11:12:49,996 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-21 11:12:49,997 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-21 11:12:49,997 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-21 11:12:49,997 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-07-21 11:12:49,997 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-07-21 11:12:49,997 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 11:12:49,997 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-07-21 11:12:49,997 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-07-21 11:12:49,997 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-21 11:12:49,998 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-21 11:12:49,998 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2022-07-21 11:12:49,998 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2022-07-21 11:12:49,998 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-21 11:12:49,998 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-07-21 11:12:49,998 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-07-21 11:12:49,998 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-07-21 11:12:49,998 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-07-21 11:12:49,998 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2022-07-21 11:12:49,999 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2022-07-21 11:12:49,999 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-21 11:12:49,999 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-21 11:12:49,999 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-07-21 11:12:49,999 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-07-21 11:12:49,999 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2022-07-21 11:12:49,999 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2022-07-21 11:12:49,999 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-21 11:12:49,999 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2022-07-21 11:12:50,000 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2022-07-21 11:12:50,000 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-07-21 11:12:50,000 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-07-21 11:12:50,000 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2022-07-21 11:12:50,000 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2022-07-21 11:12:50,000 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-07-21 11:12:50,000 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-07-21 11:12:50,000 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-21 11:12:50,000 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-21 11:12:50,001 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 11:12:50,001 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 11:12:50,001 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2022-07-21 11:12:50,001 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2022-07-21 11:12:50,423 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 11:12:50,425 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 11:12:50,541 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-21 11:12:53,867 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 11:12:53,875 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 11:12:53,875 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-21 11:12:53,877 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:12:53 BoogieIcfgContainer [2022-07-21 11:12:53,877 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 11:12:53,878 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 11:12:53,878 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 11:12:53,880 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 11:12:53,880 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 11:12:47" (1/3) ... [2022-07-21 11:12:53,881 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a556e26 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 11:12:53, skipping insertion in model container [2022-07-21 11:12:53,881 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:12:49" (2/3) ... [2022-07-21 11:12:53,881 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4a556e26 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 11:12:53, skipping insertion in model container [2022-07-21 11:12:53,881 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:12:53" (3/3) ... [2022-07-21 11:12:53,882 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-07-21 11:12:53,891 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 11:12:53,891 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 11:12:53,927 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 11:12:53,931 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1b9bd0b3, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@4cfe4430 [2022-07-21 11:12:53,931 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 11:12:53,935 INFO L276 IsEmpty]: Start isEmpty. Operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2022-07-21 11:12:53,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-21 11:12:53,943 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:12:53,944 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:12:53,944 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:12:53,947 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:12:53,947 INFO L85 PathProgramCache]: Analyzing trace with hash -1998328016, now seen corresponding path program 1 times [2022-07-21 11:12:53,953 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:12:53,953 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [676484051] [2022-07-21 11:12:53,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:12:53,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:12:54,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:12:54,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:12:54,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:12:54,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:12:54,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:12:54,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:12:54,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:12:54,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:12:54,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:12:54,347 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-21 11:12:54,348 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:12:54,348 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [676484051] [2022-07-21 11:12:54,348 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [676484051] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:12:54,348 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:12:54,349 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 11:12:54,350 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166988834] [2022-07-21 11:12:54,350 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:12:54,353 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 11:12:54,353 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:12:54,367 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 11:12:54,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 11:12:54,370 INFO L87 Difference]: Start difference. First operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-21 11:12:56,655 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:12:58,680 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:00,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:13:00,819 INFO L93 Difference]: Finished difference Result 2121 states and 3115 transitions. [2022-07-21 11:13:00,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 11:13:00,822 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 45 [2022-07-21 11:13:00,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:13:00,843 INFO L225 Difference]: With dead ends: 2121 [2022-07-21 11:13:00,844 INFO L226 Difference]: Without dead ends: 1432 [2022-07-21 11:13:00,850 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-21 11:13:00,853 INFO L413 NwaCegarLoop]: 1038 mSDtfsCounter, 1384 mSDsluCounter, 1677 mSDsCounter, 0 mSdLazyCounter, 1058 mSolverCounterSat, 685 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1495 SdHoareTripleChecker+Valid, 2715 SdHoareTripleChecker+Invalid, 1745 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 685 IncrementalHoareTripleChecker+Valid, 1058 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.2s IncrementalHoareTripleChecker+Time [2022-07-21 11:13:00,854 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1495 Valid, 2715 Invalid, 1745 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [685 Valid, 1058 Invalid, 2 Unknown, 0 Unchecked, 6.2s Time] [2022-07-21 11:13:00,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1432 states. [2022-07-21 11:13:00,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1432 to 1286. [2022-07-21 11:13:00,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1286 states, 957 states have (on average 1.3657262277951934) internal successors, (1307), 971 states have internal predecessors, (1307), 256 states have call successors, (256), 73 states have call predecessors, (256), 72 states have return successors, (255), 249 states have call predecessors, (255), 255 states have call successors, (255) [2022-07-21 11:13:00,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1286 states to 1286 states and 1818 transitions. [2022-07-21 11:13:00,979 INFO L78 Accepts]: Start accepts. Automaton has 1286 states and 1818 transitions. Word has length 45 [2022-07-21 11:13:00,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:13:00,979 INFO L495 AbstractCegarLoop]: Abstraction has 1286 states and 1818 transitions. [2022-07-21 11:13:00,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-21 11:13:00,980 INFO L276 IsEmpty]: Start isEmpty. Operand 1286 states and 1818 transitions. [2022-07-21 11:13:00,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-21 11:13:00,984 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:13:00,984 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:13:00,985 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-21 11:13:00,985 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:13:00,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:13:00,986 INFO L85 PathProgramCache]: Analyzing trace with hash -1828543170, now seen corresponding path program 1 times [2022-07-21 11:13:00,986 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:13:00,986 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [936531566] [2022-07-21 11:13:00,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:13:00,987 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:13:01,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:01,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:13:01,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:01,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:13:01,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:01,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:13:01,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:01,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:13:01,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:01,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-21 11:13:01,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:01,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-21 11:13:01,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:01,313 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-07-21 11:13:01,313 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:13:01,313 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [936531566] [2022-07-21 11:13:01,314 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [936531566] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:13:01,314 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:13:01,314 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 11:13:01,314 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1417053618] [2022-07-21 11:13:01,314 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:13:01,316 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 11:13:01,316 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:13:01,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 11:13:01,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:13:01,317 INFO L87 Difference]: Start difference. First operand 1286 states and 1818 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 11:13:03,647 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:05,667 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:08,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:13:08,144 INFO L93 Difference]: Finished difference Result 4123 states and 5934 transitions. [2022-07-21 11:13:08,145 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 11:13:08,145 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2022-07-21 11:13:08,145 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:13:08,156 INFO L225 Difference]: With dead ends: 4123 [2022-07-21 11:13:08,156 INFO L226 Difference]: Without dead ends: 2839 [2022-07-21 11:13:08,159 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-07-21 11:13:08,160 INFO L413 NwaCegarLoop]: 1083 mSDtfsCounter, 1367 mSDsluCounter, 3373 mSDsCounter, 0 mSdLazyCounter, 1808 mSolverCounterSat, 662 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1473 SdHoareTripleChecker+Valid, 4456 SdHoareTripleChecker+Invalid, 2472 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 662 IncrementalHoareTripleChecker+Valid, 1808 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.6s IncrementalHoareTripleChecker+Time [2022-07-21 11:13:08,161 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1473 Valid, 4456 Invalid, 2472 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [662 Valid, 1808 Invalid, 2 Unknown, 0 Unchecked, 6.6s Time] [2022-07-21 11:13:08,163 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2839 states. [2022-07-21 11:13:08,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2839 to 2591. [2022-07-21 11:13:08,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2591 states, 1927 states have (on average 1.3642968344577062) internal successors, (2629), 1963 states have internal predecessors, (2629), 507 states have call successors, (507), 145 states have call predecessors, (507), 156 states have return successors, (561), 498 states have call predecessors, (561), 506 states have call successors, (561) [2022-07-21 11:13:08,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2591 states to 2591 states and 3697 transitions. [2022-07-21 11:13:08,261 INFO L78 Accepts]: Start accepts. Automaton has 2591 states and 3697 transitions. Word has length 63 [2022-07-21 11:13:08,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:13:08,262 INFO L495 AbstractCegarLoop]: Abstraction has 2591 states and 3697 transitions. [2022-07-21 11:13:08,262 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 3 states have call successors, (7), 4 states have call predecessors, (7), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 11:13:08,262 INFO L276 IsEmpty]: Start isEmpty. Operand 2591 states and 3697 transitions. [2022-07-21 11:13:08,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2022-07-21 11:13:08,271 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:13:08,271 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:13:08,272 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-21 11:13:08,272 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:13:08,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:13:08,272 INFO L85 PathProgramCache]: Analyzing trace with hash -1080085425, now seen corresponding path program 1 times [2022-07-21 11:13:08,273 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:13:08,273 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121563525] [2022-07-21 11:13:08,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:13:08,273 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:13:08,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:13:08,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:13:08,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:13:08,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:13:08,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-21 11:13:08,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:08,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-21 11:13:08,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:08,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:08,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-07-21 11:13:08,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-07-21 11:13:08,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:08,573 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-07-21 11:13:08,573 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:13:08,575 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1121563525] [2022-07-21 11:13:08,575 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1121563525] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:13:08,575 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:13:08,576 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 11:13:08,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [846624252] [2022-07-21 11:13:08,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:13:08,576 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 11:13:08,576 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:13:08,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 11:13:08,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:13:08,578 INFO L87 Difference]: Start difference. First operand 2591 states and 3697 transitions. Second operand has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-21 11:13:10,702 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:12,728 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:14,753 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:17,241 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:19,265 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:21,292 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:23,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:13:23,395 INFO L93 Difference]: Finished difference Result 7632 states and 10965 transitions. [2022-07-21 11:13:23,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 11:13:23,396 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 113 [2022-07-21 11:13:23,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:13:23,416 INFO L225 Difference]: With dead ends: 7632 [2022-07-21 11:13:23,416 INFO L226 Difference]: Without dead ends: 5053 [2022-07-21 11:13:23,423 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-21 11:13:23,428 INFO L413 NwaCegarLoop]: 1026 mSDtfsCounter, 1308 mSDsluCounter, 2208 mSDsCounter, 0 mSdLazyCounter, 1462 mSolverCounterSat, 882 mSolverCounterUnsat, 6 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1411 SdHoareTripleChecker+Valid, 3234 SdHoareTripleChecker+Invalid, 2350 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 882 IncrementalHoareTripleChecker+Valid, 1462 IncrementalHoareTripleChecker+Invalid, 6 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 14.6s IncrementalHoareTripleChecker+Time [2022-07-21 11:13:23,429 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1411 Valid, 3234 Invalid, 2350 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [882 Valid, 1462 Invalid, 6 Unknown, 0 Unchecked, 14.6s Time] [2022-07-21 11:13:23,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5053 states. [2022-07-21 11:13:23,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5053 to 4275. [2022-07-21 11:13:23,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4275 states, 3162 states have (on average 1.3488298545224542) internal successors, (4265), 3224 states have internal predecessors, (4265), 829 states have call successors, (829), 262 states have call predecessors, (829), 283 states have return successors, (918), 816 states have call predecessors, (918), 828 states have call successors, (918) [2022-07-21 11:13:23,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4275 states to 4275 states and 6012 transitions. [2022-07-21 11:13:23,577 INFO L78 Accepts]: Start accepts. Automaton has 4275 states and 6012 transitions. Word has length 113 [2022-07-21 11:13:23,579 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:13:23,579 INFO L495 AbstractCegarLoop]: Abstraction has 4275 states and 6012 transitions. [2022-07-21 11:13:23,579 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.142857142857142) internal successors, (78), 3 states have internal predecessors, (78), 2 states have call successors, (12), 6 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-21 11:13:23,579 INFO L276 IsEmpty]: Start isEmpty. Operand 4275 states and 6012 transitions. [2022-07-21 11:13:23,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2022-07-21 11:13:23,587 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:13:23,587 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:13:23,588 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-21 11:13:23,588 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:13:23,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:13:23,588 INFO L85 PathProgramCache]: Analyzing trace with hash 265725666, now seen corresponding path program 1 times [2022-07-21 11:13:23,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:13:23,589 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [965334787] [2022-07-21 11:13:23,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:13:23,589 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:13:23,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:13:23,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:13:23,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:13:23,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:13:23,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-21 11:13:23,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:23,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-07-21 11:13:23,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 11:13:23,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 11:13:23,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-21 11:13:23,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:23,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:23,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-07-21 11:13:23,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-07-21 11:13:23,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:23,812 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-07-21 11:13:23,812 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:13:23,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [965334787] [2022-07-21 11:13:23,813 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [965334787] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:13:23,813 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:13:23,813 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 11:13:23,813 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [136830520] [2022-07-21 11:13:23,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:13:23,814 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 11:13:23,814 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:13:23,815 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 11:13:23,815 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:13:23,815 INFO L87 Difference]: Start difference. First operand 4275 states and 6012 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-21 11:13:25,907 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:27,950 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:30,245 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:32,276 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:34,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:13:34,642 INFO L93 Difference]: Finished difference Result 10577 states and 14962 transitions. [2022-07-21 11:13:34,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 11:13:34,643 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 130 [2022-07-21 11:13:34,643 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:13:34,691 INFO L225 Difference]: With dead ends: 10577 [2022-07-21 11:13:34,692 INFO L226 Difference]: Without dead ends: 6318 [2022-07-21 11:13:34,702 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2022-07-21 11:13:34,703 INFO L413 NwaCegarLoop]: 1212 mSDtfsCounter, 826 mSDsluCounter, 2909 mSDsCounter, 0 mSdLazyCounter, 1463 mSolverCounterSat, 417 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 890 SdHoareTripleChecker+Valid, 4121 SdHoareTripleChecker+Invalid, 1884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 417 IncrementalHoareTripleChecker+Valid, 1463 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.6s IncrementalHoareTripleChecker+Time [2022-07-21 11:13:34,703 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [890 Valid, 4121 Invalid, 1884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [417 Valid, 1463 Invalid, 4 Unknown, 0 Unchecked, 10.6s Time] [2022-07-21 11:13:34,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6318 states. [2022-07-21 11:13:34,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6318 to 5704. [2022-07-21 11:13:34,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5704 states, 4250 states have (on average 1.3538823529411765) internal successors, (5754), 4336 states have internal predecessors, (5754), 1066 states have call successors, (1066), 358 states have call predecessors, (1066), 387 states have return successors, (1183), 1041 states have call predecessors, (1183), 1065 states have call successors, (1183) [2022-07-21 11:13:34,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5704 states to 5704 states and 8003 transitions. [2022-07-21 11:13:34,857 INFO L78 Accepts]: Start accepts. Automaton has 5704 states and 8003 transitions. Word has length 130 [2022-07-21 11:13:34,857 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:13:34,858 INFO L495 AbstractCegarLoop]: Abstraction has 5704 states and 8003 transitions. [2022-07-21 11:13:34,858 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-21 11:13:34,860 INFO L276 IsEmpty]: Start isEmpty. Operand 5704 states and 8003 transitions. [2022-07-21 11:13:34,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 139 [2022-07-21 11:13:34,869 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:13:34,869 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:13:34,869 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-21 11:13:34,869 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:13:34,870 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:13:34,870 INFO L85 PathProgramCache]: Analyzing trace with hash -1355234686, now seen corresponding path program 1 times [2022-07-21 11:13:34,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:13:34,871 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [103106269] [2022-07-21 11:13:34,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:13:34,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:13:34,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:13:35,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:13:35,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:13:35,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:13:35,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-21 11:13:35,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-21 11:13:35,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-07-21 11:13:35,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-21 11:13:35,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-07-21 11:13:35,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:35,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-07-21 11:13:35,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:35,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:35,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:35,192 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2022-07-21 11:13:35,192 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:13:35,192 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [103106269] [2022-07-21 11:13:35,192 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [103106269] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:13:35,193 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:13:35,193 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-07-21 11:13:35,194 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1160504467] [2022-07-21 11:13:35,194 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:13:35,195 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-21 11:13:35,195 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:13:35,195 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-21 11:13:35,195 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-07-21 11:13:35,195 INFO L87 Difference]: Start difference. First operand 5704 states and 8003 transitions. Second operand has 9 states, 9 states have (on average 10.222222222222221) internal successors, (92), 5 states have internal predecessors, (92), 2 states have call successors, (14), 6 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-07-21 11:13:37,317 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:39,351 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:41,372 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:43,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:13:43,832 INFO L93 Difference]: Finished difference Result 9240 states and 13053 transitions. [2022-07-21 11:13:43,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-21 11:13:43,833 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.222222222222221) internal successors, (92), 5 states have internal predecessors, (92), 2 states have call successors, (14), 6 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 138 [2022-07-21 11:13:43,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:13:43,849 INFO L225 Difference]: With dead ends: 9240 [2022-07-21 11:13:43,849 INFO L226 Difference]: Without dead ends: 3553 [2022-07-21 11:13:43,862 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-07-21 11:13:43,862 INFO L413 NwaCegarLoop]: 893 mSDtfsCounter, 488 mSDsluCounter, 3532 mSDsCounter, 0 mSdLazyCounter, 1672 mSolverCounterSat, 518 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 511 SdHoareTripleChecker+Valid, 4425 SdHoareTripleChecker+Invalid, 2193 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 518 IncrementalHoareTripleChecker+Valid, 1672 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.5s IncrementalHoareTripleChecker+Time [2022-07-21 11:13:43,863 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [511 Valid, 4425 Invalid, 2193 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [518 Valid, 1672 Invalid, 3 Unknown, 0 Unchecked, 8.5s Time] [2022-07-21 11:13:43,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3553 states. [2022-07-21 11:13:43,962 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3553 to 2926. [2022-07-21 11:13:43,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2926 states, 2183 states have (on average 1.3518094365551994) internal successors, (2951), 2226 states have internal predecessors, (2951), 540 states have call successors, (540), 188 states have call predecessors, (540), 202 states have return successors, (598), 527 states have call predecessors, (598), 539 states have call successors, (598) [2022-07-21 11:13:43,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2926 states to 2926 states and 4089 transitions. [2022-07-21 11:13:43,976 INFO L78 Accepts]: Start accepts. Automaton has 2926 states and 4089 transitions. Word has length 138 [2022-07-21 11:13:43,977 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:13:43,978 INFO L495 AbstractCegarLoop]: Abstraction has 2926 states and 4089 transitions. [2022-07-21 11:13:43,978 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.222222222222221) internal successors, (92), 5 states have internal predecessors, (92), 2 states have call successors, (14), 6 states have call predecessors, (14), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-07-21 11:13:43,978 INFO L276 IsEmpty]: Start isEmpty. Operand 2926 states and 4089 transitions. [2022-07-21 11:13:43,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 145 [2022-07-21 11:13:43,984 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:13:43,984 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:13:43,984 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-21 11:13:43,984 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:13:43,985 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:13:43,985 INFO L85 PathProgramCache]: Analyzing trace with hash 874391015, now seen corresponding path program 1 times [2022-07-21 11:13:43,985 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:13:43,985 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1896743421] [2022-07-21 11:13:43,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:13:43,985 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:13:44,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:13:44,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:13:44,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:13:44,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:13:44,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-21 11:13:44,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-21 11:13:44,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-21 11:13:44,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-21 11:13:44,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-21 11:13:44,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-07-21 11:13:44,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:44,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-07-21 11:13:44,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:44,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:44,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:44,378 INFO L134 CoverageAnalysis]: Checked inductivity of 96 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 77 trivial. 0 not checked. [2022-07-21 11:13:44,378 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:13:44,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1896743421] [2022-07-21 11:13:44,379 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1896743421] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:13:44,379 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:13:44,379 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-07-21 11:13:44,379 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1211819137] [2022-07-21 11:13:44,379 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:13:44,380 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-21 11:13:44,380 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:13:44,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-21 11:13:44,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-07-21 11:13:44,381 INFO L87 Difference]: Start difference. First operand 2926 states and 4089 transitions. Second operand has 9 states, 9 states have (on average 10.666666666666666) internal successors, (96), 4 states have internal predecessors, (96), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2022-07-21 11:13:46,534 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:49,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:13:49,013 INFO L93 Difference]: Finished difference Result 6300 states and 9026 transitions. [2022-07-21 11:13:49,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 11:13:49,013 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.666666666666666) internal successors, (96), 4 states have internal predecessors, (96), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) Word has length 144 [2022-07-21 11:13:49,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:13:49,028 INFO L225 Difference]: With dead ends: 6300 [2022-07-21 11:13:49,029 INFO L226 Difference]: Without dead ends: 3416 [2022-07-21 11:13:49,038 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-21 11:13:49,039 INFO L413 NwaCegarLoop]: 922 mSDtfsCounter, 212 mSDsluCounter, 3667 mSDsCounter, 0 mSdLazyCounter, 1712 mSolverCounterSat, 180 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 235 SdHoareTripleChecker+Valid, 4589 SdHoareTripleChecker+Invalid, 1893 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 180 IncrementalHoareTripleChecker+Valid, 1712 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.5s IncrementalHoareTripleChecker+Time [2022-07-21 11:13:49,039 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [235 Valid, 4589 Invalid, 1893 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [180 Valid, 1712 Invalid, 1 Unknown, 0 Unchecked, 4.5s Time] [2022-07-21 11:13:49,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3416 states. [2022-07-21 11:13:49,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3416 to 3050. [2022-07-21 11:13:49,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3050 states, 2256 states have (on average 1.3457446808510638) internal successors, (3036), 2308 states have internal predecessors, (3036), 578 states have call successors, (578), 188 states have call predecessors, (578), 215 states have return successors, (671), 569 states have call predecessors, (671), 577 states have call successors, (671) [2022-07-21 11:13:49,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3050 states to 3050 states and 4285 transitions. [2022-07-21 11:13:49,141 INFO L78 Accepts]: Start accepts. Automaton has 3050 states and 4285 transitions. Word has length 144 [2022-07-21 11:13:49,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:13:49,142 INFO L495 AbstractCegarLoop]: Abstraction has 3050 states and 4285 transitions. [2022-07-21 11:13:49,142 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.666666666666666) internal successors, (96), 4 states have internal predecessors, (96), 2 states have call successors, (15), 6 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 1 states have call successors, (14) [2022-07-21 11:13:49,142 INFO L276 IsEmpty]: Start isEmpty. Operand 3050 states and 4285 transitions. [2022-07-21 11:13:49,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 152 [2022-07-21 11:13:49,150 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:13:49,150 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:13:49,150 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-21 11:13:49,150 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:13:49,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:13:49,151 INFO L85 PathProgramCache]: Analyzing trace with hash 1123820233, now seen corresponding path program 1 times [2022-07-21 11:13:49,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:13:49,151 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1964550977] [2022-07-21 11:13:49,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:13:49,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:13:49,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:13:49,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:13:49,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:13:49,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:13:49,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-21 11:13:49,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-21 11:13:49,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-21 11:13:49,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-21 11:13:49,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-21 11:13:49,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-07-21 11:13:49,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:49,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-07-21 11:13:49,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:49,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:49,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 11:13:49,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:49,573 INFO L134 CoverageAnalysis]: Checked inductivity of 96 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2022-07-21 11:13:49,574 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:13:49,574 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1964550977] [2022-07-21 11:13:49,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1964550977] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:13:49,574 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:13:49,574 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-07-21 11:13:49,574 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1780522228] [2022-07-21 11:13:49,574 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:13:49,575 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-07-21 11:13:49,575 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:13:49,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-07-21 11:13:49,575 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=87, Unknown=0, NotChecked=0, Total=110 [2022-07-21 11:13:49,576 INFO L87 Difference]: Start difference. First operand 3050 states and 4285 transitions. Second operand has 11 states, 11 states have (on average 9.090909090909092) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (16), 6 states have call predecessors, (16), 3 states have return successors, (15), 4 states have call predecessors, (15), 2 states have call successors, (15) [2022-07-21 11:13:51,700 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:53,735 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:13:56,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:13:56,236 INFO L93 Difference]: Finished difference Result 6426 states and 9090 transitions. [2022-07-21 11:13:56,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-21 11:13:56,236 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 9.090909090909092) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (16), 6 states have call predecessors, (16), 3 states have return successors, (15), 4 states have call predecessors, (15), 2 states have call successors, (15) Word has length 151 [2022-07-21 11:13:56,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:13:56,256 INFO L225 Difference]: With dead ends: 6426 [2022-07-21 11:13:56,256 INFO L226 Difference]: Without dead ends: 3418 [2022-07-21 11:13:56,263 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-07-21 11:13:56,264 INFO L413 NwaCegarLoop]: 918 mSDtfsCounter, 319 mSDsluCounter, 5106 mSDsCounter, 0 mSdLazyCounter, 2175 mSolverCounterSat, 333 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 342 SdHoareTripleChecker+Valid, 6024 SdHoareTripleChecker+Invalid, 2510 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 333 IncrementalHoareTripleChecker+Valid, 2175 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.5s IncrementalHoareTripleChecker+Time [2022-07-21 11:13:56,265 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [342 Valid, 6024 Invalid, 2510 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [333 Valid, 2175 Invalid, 2 Unknown, 0 Unchecked, 6.5s Time] [2022-07-21 11:13:56,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3418 states. [2022-07-21 11:13:56,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3418 to 3074. [2022-07-21 11:13:56,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3074 states, 2274 states have (on average 1.3430079155672823) internal successors, (3054), 2324 states have internal predecessors, (3054), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-07-21 11:13:56,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3074 states to 3074 states and 4326 transitions. [2022-07-21 11:13:56,395 INFO L78 Accepts]: Start accepts. Automaton has 3074 states and 4326 transitions. Word has length 151 [2022-07-21 11:13:56,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:13:56,396 INFO L495 AbstractCegarLoop]: Abstraction has 3074 states and 4326 transitions. [2022-07-21 11:13:56,397 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 9.090909090909092) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (16), 6 states have call predecessors, (16), 3 states have return successors, (15), 4 states have call predecessors, (15), 2 states have call successors, (15) [2022-07-21 11:13:56,397 INFO L276 IsEmpty]: Start isEmpty. Operand 3074 states and 4326 transitions. [2022-07-21 11:13:56,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 158 [2022-07-21 11:13:56,404 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:13:56,404 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:13:56,405 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-21 11:13:56,405 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:13:56,405 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:13:56,405 INFO L85 PathProgramCache]: Analyzing trace with hash -52186779, now seen corresponding path program 1 times [2022-07-21 11:13:56,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:13:56,406 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326070250] [2022-07-21 11:13:56,406 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:13:56,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:13:56,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:13:56,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:13:56,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:13:56,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:13:56,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-21 11:13:56,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-21 11:13:56,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-21 11:13:56,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-21 11:13:56,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-21 11:13:56,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-07-21 11:13:56,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:56,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:13:56,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 107 [2022-07-21 11:13:56,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:56,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:13:56,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 11:13:56,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:13:56,840 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-07-21 11:13:56,840 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:13:56,840 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326070250] [2022-07-21 11:13:56,840 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326070250] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:13:56,840 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:13:56,840 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-21 11:13:56,840 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [417852033] [2022-07-21 11:13:56,841 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:13:56,841 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 11:13:56,841 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:13:56,841 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 11:13:56,841 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-07-21 11:13:56,842 INFO L87 Difference]: Start difference. First operand 3074 states and 4326 transitions. Second operand has 8 states, 8 states have (on average 12.125) internal successors, (97), 4 states have internal predecessors, (97), 2 states have call successors, (17), 6 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-07-21 11:13:58,954 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:00,983 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:02,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:14:02,926 INFO L93 Difference]: Finished difference Result 6466 states and 9148 transitions. [2022-07-21 11:14:02,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 11:14:02,927 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.125) internal successors, (97), 4 states have internal predecessors, (97), 2 states have call successors, (17), 6 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 157 [2022-07-21 11:14:02,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:14:02,940 INFO L225 Difference]: With dead ends: 6466 [2022-07-21 11:14:02,940 INFO L226 Difference]: Without dead ends: 3408 [2022-07-21 11:14:02,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-07-21 11:14:02,949 INFO L413 NwaCegarLoop]: 919 mSDtfsCounter, 323 mSDsluCounter, 2514 mSDsCounter, 0 mSdLazyCounter, 1148 mSolverCounterSat, 332 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 346 SdHoareTripleChecker+Valid, 3433 SdHoareTripleChecker+Invalid, 1482 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 332 IncrementalHoareTripleChecker+Valid, 1148 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2022-07-21 11:14:02,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [346 Valid, 3433 Invalid, 1482 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [332 Valid, 1148 Invalid, 2 Unknown, 0 Unchecked, 5.9s Time] [2022-07-21 11:14:02,952 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3408 states. [2022-07-21 11:14:03,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3408 to 3079. [2022-07-21 11:14:03,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3079 states, 2279 states have (on average 1.3422553751645458) internal successors, (3059), 2329 states have internal predecessors, (3059), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-07-21 11:14:03,091 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3079 states to 3079 states and 4331 transitions. [2022-07-21 11:14:03,092 INFO L78 Accepts]: Start accepts. Automaton has 3079 states and 4331 transitions. Word has length 157 [2022-07-21 11:14:03,092 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:14:03,092 INFO L495 AbstractCegarLoop]: Abstraction has 3079 states and 4331 transitions. [2022-07-21 11:14:03,092 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.125) internal successors, (97), 4 states have internal predecessors, (97), 2 states have call successors, (17), 6 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-07-21 11:14:03,092 INFO L276 IsEmpty]: Start isEmpty. Operand 3079 states and 4331 transitions. [2022-07-21 11:14:03,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2022-07-21 11:14:03,099 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:14:03,099 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:14:03,099 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-21 11:14:03,100 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:14:03,100 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:14:03,100 INFO L85 PathProgramCache]: Analyzing trace with hash -1205243631, now seen corresponding path program 1 times [2022-07-21 11:14:03,100 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:14:03,100 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1494362991] [2022-07-21 11:14:03,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:03,101 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:14:03,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:03,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:14:03,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:14:03,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:14:03,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-21 11:14:03,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-21 11:14:03,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-21 11:14:03,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-07-21 11:14:03,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-21 11:14:03,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-21 11:14:03,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:03,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:03,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2022-07-21 11:14:03,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:03,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:03,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 11:14:03,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:03,605 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-07-21 11:14:03,605 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:14:03,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1494362991] [2022-07-21 11:14:03,605 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1494362991] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 11:14:03,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [300330510] [2022-07-21 11:14:03,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:03,606 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 11:14:03,606 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 11:14:03,612 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 11:14:03,614 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-21 11:14:04,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:04,500 INFO L263 TraceCheckSpWp]: Trace formula consists of 2467 conjuncts, 35 conjunts are in the unsatisfiable core [2022-07-21 11:14:04,511 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:14:04,626 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-07-21 11:14:04,626 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:14:04,626 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [300330510] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:14:04,627 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 11:14:04,627 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [9] total 15 [2022-07-21 11:14:04,627 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [974978398] [2022-07-21 11:14:04,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:14:04,628 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 11:14:04,628 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:14:04,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 11:14:04,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2022-07-21 11:14:04,628 INFO L87 Difference]: Start difference. First operand 3079 states and 4331 transitions. Second operand has 8 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 4 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) [2022-07-21 11:14:04,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:14:04,834 INFO L93 Difference]: Finished difference Result 6120 states and 8615 transitions. [2022-07-21 11:14:04,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 11:14:04,835 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 4 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) Word has length 158 [2022-07-21 11:14:04,835 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:14:04,843 INFO L225 Difference]: With dead ends: 6120 [2022-07-21 11:14:04,843 INFO L226 Difference]: Without dead ends: 3084 [2022-07-21 11:14:04,849 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 180 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=233, Unknown=0, NotChecked=0, Total=272 [2022-07-21 11:14:04,849 INFO L413 NwaCegarLoop]: 945 mSDtfsCounter, 419 mSDsluCounter, 5148 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 503 SdHoareTripleChecker+Valid, 6093 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 11:14:04,849 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [503 Valid, 6093 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 11:14:04,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3084 states. [2022-07-21 11:14:04,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3084 to 3079. [2022-07-21 11:14:04,905 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3079 states, 2279 states have (on average 1.3413777972795085) internal successors, (3057), 2329 states have internal predecessors, (3057), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-07-21 11:14:04,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3079 states to 3079 states and 4329 transitions. [2022-07-21 11:14:04,946 INFO L78 Accepts]: Start accepts. Automaton has 3079 states and 4329 transitions. Word has length 158 [2022-07-21 11:14:04,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:14:04,946 INFO L495 AbstractCegarLoop]: Abstraction has 3079 states and 4329 transitions. [2022-07-21 11:14:04,946 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 4 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) [2022-07-21 11:14:04,946 INFO L276 IsEmpty]: Start isEmpty. Operand 3079 states and 4329 transitions. [2022-07-21 11:14:04,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2022-07-21 11:14:04,952 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:14:04,952 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:14:04,974 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-21 11:14:05,174 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 11:14:05,174 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:14:05,174 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:14:05,174 INFO L85 PathProgramCache]: Analyzing trace with hash 1183320399, now seen corresponding path program 1 times [2022-07-21 11:14:05,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:14:05,175 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1905235493] [2022-07-21 11:14:05,175 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:05,175 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:14:05,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:05,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:14:05,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:14:05,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:14:05,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-21 11:14:05,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-21 11:14:05,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-21 11:14:05,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-07-21 11:14:05,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-21 11:14:05,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-21 11:14:05,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:05,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:05,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2022-07-21 11:14:05,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:05,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:05,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 11:14:05,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:05,519 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-07-21 11:14:05,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:14:05,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1905235493] [2022-07-21 11:14:05,520 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1905235493] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 11:14:05,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2103587312] [2022-07-21 11:14:05,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:05,520 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 11:14:05,520 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 11:14:05,521 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 11:14:05,559 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-21 11:14:06,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:06,198 INFO L263 TraceCheckSpWp]: Trace formula consists of 2468 conjuncts, 37 conjunts are in the unsatisfiable core [2022-07-21 11:14:06,205 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:14:06,275 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2022-07-21 11:14:06,275 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:14:06,275 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2103587312] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:14:06,275 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 11:14:06,276 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [9] total 13 [2022-07-21 11:14:06,276 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [413379442] [2022-07-21 11:14:06,276 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:14:06,276 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 11:14:06,276 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:14:06,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 11:14:06,277 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2022-07-21 11:14:06,277 INFO L87 Difference]: Start difference. First operand 3079 states and 4329 transitions. Second operand has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-07-21 11:14:06,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:14:06,455 INFO L93 Difference]: Finished difference Result 6115 states and 8606 transitions. [2022-07-21 11:14:06,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 11:14:06,455 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 158 [2022-07-21 11:14:06,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:14:06,463 INFO L225 Difference]: With dead ends: 6115 [2022-07-21 11:14:06,463 INFO L226 Difference]: Without dead ends: 3079 [2022-07-21 11:14:06,468 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 182 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2022-07-21 11:14:06,469 INFO L413 NwaCegarLoop]: 943 mSDtfsCounter, 430 mSDsluCounter, 3245 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 515 SdHoareTripleChecker+Valid, 4188 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 11:14:06,469 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [515 Valid, 4188 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 11:14:06,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3079 states. [2022-07-21 11:14:06,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3079 to 3079. [2022-07-21 11:14:06,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3079 states, 2279 states have (on average 1.3405002193944713) internal successors, (3055), 2329 states have internal predecessors, (3055), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-07-21 11:14:06,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3079 states to 3079 states and 4327 transitions. [2022-07-21 11:14:06,568 INFO L78 Accepts]: Start accepts. Automaton has 3079 states and 4327 transitions. Word has length 158 [2022-07-21 11:14:06,568 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:14:06,568 INFO L495 AbstractCegarLoop]: Abstraction has 3079 states and 4327 transitions. [2022-07-21 11:14:06,568 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 21.4) internal successors, (107), 5 states have internal predecessors, (107), 3 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-07-21 11:14:06,568 INFO L276 IsEmpty]: Start isEmpty. Operand 3079 states and 4327 transitions. [2022-07-21 11:14:06,573 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 159 [2022-07-21 11:14:06,573 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:14:06,574 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:14:06,602 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-21 11:14:06,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-21 11:14:06,787 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:14:06,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:14:06,788 INFO L85 PathProgramCache]: Analyzing trace with hash -538682287, now seen corresponding path program 1 times [2022-07-21 11:14:06,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:14:06,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354952843] [2022-07-21 11:14:06,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:06,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:14:06,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:06,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:06,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:06,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:14:06,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:06,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:14:06,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:06,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:14:06,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-21 11:14:07,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-21 11:14:07,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-21 11:14:07,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-07-21 11:14:07,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-21 11:14:07,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-21 11:14:07,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:07,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:07,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2022-07-21 11:14:07,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:07,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:07,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 11:14:07,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:07,173 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-07-21 11:14:07,174 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:14:07,174 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1354952843] [2022-07-21 11:14:07,174 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1354952843] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 11:14:07,174 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [267719461] [2022-07-21 11:14:07,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:07,174 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 11:14:07,174 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 11:14:07,188 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 11:14:07,216 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-21 11:14:08,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:08,088 INFO L263 TraceCheckSpWp]: Trace formula consists of 2469 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-21 11:14:08,093 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:14:08,210 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 1 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-07-21 11:14:08,211 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 11:14:08,400 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-07-21 11:14:08,400 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [267719461] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 11:14:08,400 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 11:14:08,400 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2022-07-21 11:14:08,401 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1129436912] [2022-07-21 11:14:08,401 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 11:14:08,401 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-07-21 11:14:08,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:14:08,402 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-07-21 11:14:08,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=137, Unknown=0, NotChecked=0, Total=182 [2022-07-21 11:14:08,402 INFO L87 Difference]: Start difference. First operand 3079 states and 4327 transitions. Second operand has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2022-07-21 11:14:10,850 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:12,881 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:14,916 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:16,941 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:20,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:14:20,610 INFO L93 Difference]: Finished difference Result 6479 states and 9155 transitions. [2022-07-21 11:14:20,611 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-21 11:14:20,611 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 158 [2022-07-21 11:14:20,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:14:20,619 INFO L225 Difference]: With dead ends: 6479 [2022-07-21 11:14:20,619 INFO L226 Difference]: Without dead ends: 3415 [2022-07-21 11:14:20,624 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 360 GetRequests, 337 SyntacticMatches, 1 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=149, Invalid=403, Unknown=0, NotChecked=0, Total=552 [2022-07-21 11:14:20,625 INFO L413 NwaCegarLoop]: 918 mSDtfsCounter, 225 mSDsluCounter, 6278 mSDsCounter, 0 mSdLazyCounter, 2786 mSolverCounterSat, 187 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 248 SdHoareTripleChecker+Valid, 7196 SdHoareTripleChecker+Invalid, 2977 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 187 IncrementalHoareTripleChecker+Valid, 2786 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.8s IncrementalHoareTripleChecker+Time [2022-07-21 11:14:20,625 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [248 Valid, 7196 Invalid, 2977 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [187 Valid, 2786 Invalid, 4 Unknown, 0 Unchecked, 11.8s Time] [2022-07-21 11:14:20,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3415 states. [2022-07-21 11:14:20,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3415 to 3086. [2022-07-21 11:14:20,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3086 states, 2286 states have (on average 1.3394575678040246) internal successors, (3062), 2336 states have internal predecessors, (3062), 578 states have call successors, (578), 188 states have call predecessors, (578), 221 states have return successors, (694), 577 states have call predecessors, (694), 577 states have call successors, (694) [2022-07-21 11:14:20,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3086 states to 3086 states and 4334 transitions. [2022-07-21 11:14:20,706 INFO L78 Accepts]: Start accepts. Automaton has 3086 states and 4334 transitions. Word has length 158 [2022-07-21 11:14:20,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:14:20,706 INFO L495 AbstractCegarLoop]: Abstraction has 3086 states and 4334 transitions. [2022-07-21 11:14:20,707 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 10.0) internal successors, (140), 10 states have internal predecessors, (140), 2 states have call successors, (41), 6 states have call predecessors, (41), 5 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2022-07-21 11:14:20,707 INFO L276 IsEmpty]: Start isEmpty. Operand 3086 states and 4334 transitions. [2022-07-21 11:14:20,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2022-07-21 11:14:20,712 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:14:20,712 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:14:20,748 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-21 11:14:20,948 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 11:14:20,948 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:14:20,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:14:20,948 INFO L85 PathProgramCache]: Analyzing trace with hash -1478023259, now seen corresponding path program 2 times [2022-07-21 11:14:20,948 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:14:20,948 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [5503448] [2022-07-21 11:14:20,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:20,949 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:14:21,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:21,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:14:21,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:14:21,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:14:21,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-21 11:14:21,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-21 11:14:21,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-07-21 11:14:21,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-21 11:14:21,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-07-21 11:14:21,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2022-07-21 11:14:21,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:21,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:21,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-07-21 11:14:21,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:21,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:21,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:21,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 11:14:21,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:22,026 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 88 trivial. 0 not checked. [2022-07-21 11:14:22,026 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:14:22,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [5503448] [2022-07-21 11:14:22,026 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [5503448] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:14:22,026 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:14:22,026 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2022-07-21 11:14:22,026 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2097249281] [2022-07-21 11:14:22,026 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:14:22,027 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-07-21 11:14:22,027 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:14:22,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-07-21 11:14:22,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2022-07-21 11:14:22,027 INFO L87 Difference]: Start difference. First operand 3086 states and 4334 transitions. Second operand has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2022-07-21 11:14:24,338 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:28,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:14:28,241 INFO L93 Difference]: Finished difference Result 6457 states and 9213 transitions. [2022-07-21 11:14:28,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-07-21 11:14:28,242 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2022-07-21 11:14:28,242 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:14:28,263 INFO L225 Difference]: With dead ends: 6457 [2022-07-21 11:14:28,263 INFO L226 Difference]: Without dead ends: 3417 [2022-07-21 11:14:28,271 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=78, Invalid=522, Unknown=0, NotChecked=0, Total=600 [2022-07-21 11:14:28,272 INFO L413 NwaCegarLoop]: 925 mSDtfsCounter, 333 mSDsluCounter, 9875 mSDsCounter, 0 mSdLazyCounter, 3916 mSolverCounterSat, 334 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 356 SdHoareTripleChecker+Valid, 10800 SdHoareTripleChecker+Invalid, 4251 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 334 IncrementalHoareTripleChecker+Valid, 3916 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2022-07-21 11:14:28,272 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [356 Valid, 10800 Invalid, 4251 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [334 Valid, 3916 Invalid, 1 Unknown, 0 Unchecked, 5.9s Time] [2022-07-21 11:14:28,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3417 states. [2022-07-21 11:14:28,377 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3417 to 3098. [2022-07-21 11:14:28,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3098 states, 2297 states have (on average 1.3352198519808445) internal successors, (3067), 2342 states have internal predecessors, (3067), 578 states have call successors, (578), 188 states have call predecessors, (578), 222 states have return successors, (698), 583 states have call predecessors, (698), 577 states have call successors, (698) [2022-07-21 11:14:28,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3098 states to 3098 states and 4343 transitions. [2022-07-21 11:14:28,386 INFO L78 Accepts]: Start accepts. Automaton has 3098 states and 4343 transitions. Word has length 161 [2022-07-21 11:14:28,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:14:28,387 INFO L495 AbstractCegarLoop]: Abstraction has 3098 states and 4343 transitions. [2022-07-21 11:14:28,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 18 states have (on average 5.888888888888889) internal successors, (106), 11 states have internal predecessors, (106), 3 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 2 states have call successors, (16) [2022-07-21 11:14:28,387 INFO L276 IsEmpty]: Start isEmpty. Operand 3098 states and 4343 transitions. [2022-07-21 11:14:28,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2022-07-21 11:14:28,392 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:14:28,392 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:14:28,392 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-07-21 11:14:28,393 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:14:28,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:14:28,393 INFO L85 PathProgramCache]: Analyzing trace with hash -1891071574, now seen corresponding path program 1 times [2022-07-21 11:14:28,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:14:28,393 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [989815236] [2022-07-21 11:14:28,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:28,393 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:14:28,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:28,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:14:28,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:14:28,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:14:28,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-21 11:14:28,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-21 11:14:28,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-07-21 11:14:28,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-21 11:14:28,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-07-21 11:14:28,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-21 11:14:28,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:28,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2022-07-21 11:14:28,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:28,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-21 11:14:28,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 11:14:28,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:28,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:28,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:28,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:29,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:29,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:29,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 11:14:29,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:29,151 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2022-07-21 11:14:29,151 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:14:29,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [989815236] [2022-07-21 11:14:29,152 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [989815236] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:14:29,152 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:14:29,152 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2022-07-21 11:14:29,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [269745890] [2022-07-21 11:14:29,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:14:29,152 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-07-21 11:14:29,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:14:29,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-07-21 11:14:29,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=237, Unknown=0, NotChecked=0, Total=272 [2022-07-21 11:14:29,153 INFO L87 Difference]: Start difference. First operand 3098 states and 4343 transitions. Second operand has 17 states, 17 states have (on average 6.352941176470588) internal successors, (108), 9 states have internal predecessors, (108), 2 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) [2022-07-21 11:14:31,579 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:33,608 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:37,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:14:37,041 INFO L93 Difference]: Finished difference Result 6469 states and 9208 transitions. [2022-07-21 11:14:37,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-07-21 11:14:37,042 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 6.352941176470588) internal successors, (108), 9 states have internal predecessors, (108), 2 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) Word has length 169 [2022-07-21 11:14:37,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:14:37,064 INFO L225 Difference]: With dead ends: 6469 [2022-07-21 11:14:37,065 INFO L226 Difference]: Without dead ends: 3417 [2022-07-21 11:14:37,071 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 59 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=59, Invalid=361, Unknown=0, NotChecked=0, Total=420 [2022-07-21 11:14:37,071 INFO L413 NwaCegarLoop]: 919 mSDtfsCounter, 437 mSDsluCounter, 9029 mSDsCounter, 0 mSdLazyCounter, 3590 mSolverCounterSat, 485 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 460 SdHoareTripleChecker+Valid, 9948 SdHoareTripleChecker+Invalid, 4077 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 485 IncrementalHoareTripleChecker+Valid, 3590 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.6s IncrementalHoareTripleChecker+Time [2022-07-21 11:14:37,072 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [460 Valid, 9948 Invalid, 4077 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [485 Valid, 3590 Invalid, 2 Unknown, 0 Unchecked, 7.6s Time] [2022-07-21 11:14:37,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3417 states. [2022-07-21 11:14:37,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3417 to 3109. [2022-07-21 11:14:37,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3109 states, 2306 states have (on average 1.3326105810928013) internal successors, (3073), 2349 states have internal predecessors, (3073), 578 states have call successors, (578), 188 states have call predecessors, (578), 224 states have return successors, (701), 587 states have call predecessors, (701), 577 states have call successors, (701) [2022-07-21 11:14:37,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3109 states to 3109 states and 4352 transitions. [2022-07-21 11:14:37,176 INFO L78 Accepts]: Start accepts. Automaton has 3109 states and 4352 transitions. Word has length 169 [2022-07-21 11:14:37,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:14:37,176 INFO L495 AbstractCegarLoop]: Abstraction has 3109 states and 4352 transitions. [2022-07-21 11:14:37,176 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 6.352941176470588) internal successors, (108), 9 states have internal predecessors, (108), 2 states have call successors, (20), 6 states have call predecessors, (20), 6 states have return successors, (19), 6 states have call predecessors, (19), 1 states have call successors, (19) [2022-07-21 11:14:37,176 INFO L276 IsEmpty]: Start isEmpty. Operand 3109 states and 4352 transitions. [2022-07-21 11:14:37,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-07-21 11:14:37,181 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:14:37,181 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:14:37,182 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-07-21 11:14:37,182 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:14:37,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:14:37,182 INFO L85 PathProgramCache]: Analyzing trace with hash 1195665736, now seen corresponding path program 1 times [2022-07-21 11:14:37,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:14:37,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2025680328] [2022-07-21 11:14:37,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:37,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:14:37,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:14:37,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:14:37,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:14:37,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 11:14:37,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-21 11:14:37,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-21 11:14:37,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-07-21 11:14:37,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-21 11:14:37,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-07-21 11:14:37,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2022-07-21 11:14:37,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:37,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-07-21 11:14:37,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 11:14:37,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 11:14:37,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-21 11:14:37,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:37,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 11:14:37,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 11:14:37,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:14:37,422 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2022-07-21 11:14:37,422 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:14:37,422 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2025680328] [2022-07-21 11:14:37,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2025680328] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:14:37,423 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:14:37,423 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 11:14:37,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414909876] [2022-07-21 11:14:37,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:14:37,424 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 11:14:37,424 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:14:37,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 11:14:37,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-07-21 11:14:37,424 INFO L87 Difference]: Start difference. First operand 3109 states and 4352 transitions. Second operand has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-07-21 11:14:39,535 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:41,580 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-21 11:14:43,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:14:43,691 INFO L93 Difference]: Finished difference Result 7313 states and 10253 transitions. [2022-07-21 11:14:43,691 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 11:14:43,692 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 172 [2022-07-21 11:14:43,692 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:14:43,702 INFO L225 Difference]: With dead ends: 7313 [2022-07-21 11:14:43,702 INFO L226 Difference]: Without dead ends: 4250 [2022-07-21 11:14:43,706 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-21 11:14:43,706 INFO L413 NwaCegarLoop]: 1062 mSDtfsCounter, 1115 mSDsluCounter, 1629 mSDsCounter, 0 mSdLazyCounter, 942 mSolverCounterSat, 668 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1201 SdHoareTripleChecker+Valid, 2691 SdHoareTripleChecker+Invalid, 1612 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 668 IncrementalHoareTripleChecker+Valid, 942 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-07-21 11:14:43,706 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1201 Valid, 2691 Invalid, 1612 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [668 Valid, 942 Invalid, 2 Unknown, 0 Unchecked, 6.1s Time] [2022-07-21 11:14:43,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4250 states. [2022-07-21 11:14:43,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4250 to 3968. [2022-07-21 11:14:43,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3968 states, 2966 states have (on average 1.3341200269723534) internal successors, (3957), 3018 states have internal predecessors, (3957), 704 states have call successors, (704), 248 states have call predecessors, (704), 297 states have return successors, (864), 719 states have call predecessors, (864), 703 states have call successors, (864) [2022-07-21 11:14:43,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3968 states to 3968 states and 5525 transitions. [2022-07-21 11:14:43,795 INFO L78 Accepts]: Start accepts. Automaton has 3968 states and 5525 transitions. Word has length 172 [2022-07-21 11:14:43,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:14:43,795 INFO L495 AbstractCegarLoop]: Abstraction has 3968 states and 5525 transitions. [2022-07-21 11:14:43,796 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 3 states have internal predecessors, (109), 3 states have call successors, (19), 5 states have call predecessors, (19), 1 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-07-21 11:14:43,796 INFO L276 IsEmpty]: Start isEmpty. Operand 3968 states and 5525 transitions. [2022-07-21 11:14:43,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2022-07-21 11:14:43,801 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:14:43,801 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:14:43,802 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-07-21 11:14:43,802 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:14:43,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:14:43,803 INFO L85 PathProgramCache]: Analyzing trace with hash -1401601602, now seen corresponding path program 1 times [2022-07-21 11:14:43,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:14:43,803 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1388181672] [2022-07-21 11:14:43,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:14:43,803 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:14:44,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-21 11:14:44,187 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-21 11:14:45,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-21 11:14:45,237 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-21 11:14:45,237 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-21 11:14:45,238 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 11:14:45,239 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-07-21 11:14:45,241 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:14:45,243 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 11:14:45,277 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-21 11:14:45,291 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,292 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,292 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,293 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,293 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,293 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,293 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,294 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,294 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,294 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-21 11:14:45,440 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 11:14:45 BoogieIcfgContainer [2022-07-21 11:14:45,440 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 11:14:45,441 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 11:14:45,441 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 11:14:45,441 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 11:14:45,441 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:12:53" (3/4) ... [2022-07-21 11:14:45,444 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-21 11:14:45,444 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 11:14:45,445 INFO L158 Benchmark]: Toolchain (without parser) took 117582.40ms. Allocated memory was 65.0MB in the beginning and 654.3MB in the end (delta: 589.3MB). Free memory was 37.6MB in the beginning and 363.7MB in the end (delta: -326.1MB). Peak memory consumption was 264.3MB. Max. memory is 16.1GB. [2022-07-21 11:14:45,446 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 48.2MB. Free memory was 29.2MB in the beginning and 29.2MB in the end (delta: 52.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 11:14:45,446 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1730.05ms. Allocated memory was 65.0MB in the beginning and 136.3MB in the end (delta: 71.3MB). Free memory was 37.4MB in the beginning and 68.3MB in the end (delta: -30.9MB). Peak memory consumption was 54.0MB. Max. memory is 16.1GB. [2022-07-21 11:14:45,447 INFO L158 Benchmark]: Boogie Procedure Inliner took 149.45ms. Allocated memory is still 136.3MB. Free memory was 68.3MB in the beginning and 54.3MB in the end (delta: 14.1MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-07-21 11:14:45,447 INFO L158 Benchmark]: Boogie Preprocessor took 139.98ms. Allocated memory is still 136.3MB. Free memory was 54.3MB in the beginning and 65.2MB in the end (delta: -11.0MB). Peak memory consumption was 7.4MB. Max. memory is 16.1GB. [2022-07-21 11:14:45,447 INFO L158 Benchmark]: RCFGBuilder took 3990.38ms. Allocated memory was 136.3MB in the beginning and 262.1MB in the end (delta: 125.8MB). Free memory was 65.2MB in the beginning and 186.2MB in the end (delta: -120.9MB). Peak memory consumption was 92.1MB. Max. memory is 16.1GB. [2022-07-21 11:14:45,448 INFO L158 Benchmark]: TraceAbstraction took 111561.88ms. Allocated memory was 262.1MB in the beginning and 654.3MB in the end (delta: 392.2MB). Free memory was 186.2MB in the beginning and 364.8MB in the end (delta: -178.6MB). Peak memory consumption was 388.9MB. Max. memory is 16.1GB. [2022-07-21 11:14:45,448 INFO L158 Benchmark]: Witness Printer took 3.96ms. Allocated memory is still 654.3MB. Free memory was 364.8MB in the beginning and 363.7MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 11:14:45,454 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 48.2MB. Free memory was 29.2MB in the beginning and 29.2MB in the end (delta: 52.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1730.05ms. Allocated memory was 65.0MB in the beginning and 136.3MB in the end (delta: 71.3MB). Free memory was 37.4MB in the beginning and 68.3MB in the end (delta: -30.9MB). Peak memory consumption was 54.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 149.45ms. Allocated memory is still 136.3MB. Free memory was 68.3MB in the beginning and 54.3MB in the end (delta: 14.1MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Preprocessor took 139.98ms. Allocated memory is still 136.3MB. Free memory was 54.3MB in the beginning and 65.2MB in the end (delta: -11.0MB). Peak memory consumption was 7.4MB. Max. memory is 16.1GB. * RCFGBuilder took 3990.38ms. Allocated memory was 136.3MB in the beginning and 262.1MB in the end (delta: 125.8MB). Free memory was 65.2MB in the beginning and 186.2MB in the end (delta: -120.9MB). Peak memory consumption was 92.1MB. Max. memory is 16.1GB. * TraceAbstraction took 111561.88ms. Allocated memory was 262.1MB in the beginning and 654.3MB in the end (delta: 392.2MB). Free memory was 186.2MB in the beginning and 364.8MB in the end (delta: -178.6MB). Peak memory consumption was 388.9MB. Max. memory is 16.1GB. * Witness Printer took 3.96ms. Allocated memory is still 654.3MB. Free memory was 364.8MB in the beginning and 363.7MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 7323]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 8887. Possible FailurePath: [L7346] int LDV_IN_INTERRUPT = 1; [L7347] struct usb_interface *mwifiex_usb_driver_group1 ; [L7348] int ldv_state_variable_2 ; [L7349] int ref_cnt ; [L7350] struct mwifiex_adapter *usb_ops_group0 ; [L7351] int ldv_state_variable_1 ; [L7352] int usb_counter ; [L7353] struct sk_buff *usb_ops_group1 ; [L7354] int ldv_state_variable_0 ; [L7514] static u8 user_rmmod ; [L7516] static struct semaphore add_remove_card_sem ; [L7517-L7527] static struct usb_device_id mwifiex_usb_table[5U] = { {3U, 4742U, 8259U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8260U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}, {3U, 4742U, 8261U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {899U, 4742U, 8262U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 255U, 255U, 255U, (unsigned char)0, 0UL}}; [L7528] struct usb_device_id const __mod_usb__mwifiex_usb_table_device_table ; [L8349-L8355] static struct usb_driver mwifiex_usb_driver = {"mwifiex_usb", & mwifiex_usb_probe, & mwifiex_usb_disconnect, 0, & mwifiex_usb_suspend, & mwifiex_usb_resume, 0, 0, 0, (struct usb_device_id const *)(& mwifiex_usb_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, 1U}; [L8862-L8866] static struct mwifiex_if_ops usb_ops = {0, 0, 0, 0, & mwifiex_register_dev, & mwifiex_unregister_dev, 0, 0, 0, & mwifiex_usb_host_to_card, & mwifiex_pm_wakeup_card, & mwifiex_pm_wakeup_card_complete, 0, 0, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_cmd_event_complete, & mwifiex_usb_data_complete, 0, & mwifiex_usb_dnld_fw, 0, 0, 0}; [L8920] int ldv_retval_0 ; [L8921] int ldv_retval_4 ; [L8922] int ldv_retval_1 ; [L8926] int ldv_retval_3 ; [L8927] int ldv_retval_2 ; [L9241] Element set_impl[15] ; [L9242] int last_index = 0; [L9376] Set LDV_SKBS ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8951] u8 ldvarg1 ; [L8952] u8 tmp ; [L8953] struct mwifiex_tx_param *ldvarg0 ; [L8954] void *tmp___0 ; [L8955] struct mwifiex_fw_image *ldvarg2 ; [L8956] void *tmp___1 ; [L8957] struct usb_device_id *ldvarg4 ; [L8958] void *tmp___2 ; [L8959] pm_message_t ldvarg3 ; [L8960] int tmp___3 ; [L8961] int tmp___4 ; [L8962] int tmp___5 ; [L8963] int tmp___6 ; [L8965] tmp = __VERIFIER_nondet_u8() [L8966] ldvarg1 = tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg1=7, ldvarg3={18446744073709551619:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] CALL, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=4, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=4, tmp___0=-2, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] RET, EXPR ldv_zalloc(4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(4UL)={0:0}, ldvarg1=7, ldvarg3={18446744073709551619:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8967] tmp___0 = ldv_zalloc(4UL) [L8968] ldvarg0 = (struct mwifiex_tx_param *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=7, ldvarg3={18446744073709551619:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=-3, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=7, ldvarg3={18446744073709551619:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8969] tmp___1 = ldv_zalloc(32UL) [L8970] ldvarg2 = (struct mwifiex_fw_image *)tmp___1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=32, tmp___0=-4, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8971] tmp___2 = ldv_zalloc(32UL) [L8972] ldvarg4 = (struct usb_device_id *)tmp___2 [L8973] CALL ldv_initialize() [L9395] CALL ldv_set_init(LDV_SKBS) [L9247] set = set_impl [L9248] last_index = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={167:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9395] RET ldv_set_init(LDV_SKBS) [L8973] RET ldv_initialize() [L8974] FCALL memset((void *)(& ldvarg3), 0, 4UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, memset((void *)(& ldvarg3), 0, 4UL)={18446744073709551619:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8975] ldv_state_variable_1 = 0 [L8976] ref_cnt = 0 [L8977] ldv_state_variable_0 = 1 [L8978] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: [L9068] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9069] COND TRUE ldv_state_variable_0 == 1 [L9070] CALL, EXPR mwifiex_usb_init_module() [L8869] int ret ; [L8870] struct _ddebug descriptor ; [L8871] long tmp ; [L8872] struct _ddebug descriptor___0 ; [L8873] long tmp___0 ; [L8875] descriptor.modname = "mwifiex_usb" [L8876] descriptor.function = "mwifiex_usb_init_module" [L8877] descriptor.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8878] descriptor.format = "Marvell USB8797 Driver\n" [L8879] descriptor.lineno = 1046U [L8880] descriptor.flags = 0U [L8881] EXPR descriptor.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={18446744073709551620:0}, descriptor.flags=0, descriptor___0={337:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={18446744073709551620:0}, descriptor.flags=0, descriptor___0={337:0}, last_index=0, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8881] tmp = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L8882] COND FALSE !(tmp != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, descriptor={18446744073709551620:0}, descriptor___0={337:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8886] CALL sema_init(& add_remove_card_sem, 1) [L7359] struct lock_class_key __key ; [L7360] struct semaphore __constr_expr_0 ; [L7362] __constr_expr_0.lock.raw_lock.ldv_1452.head_tail = 0U [L7363] __constr_expr_0.lock.magic = 3735899821U [L7364] __constr_expr_0.lock.owner_cpu = 4294967295U [L7365] __constr_expr_0.lock.owner = (void *)-1 [L7366] __constr_expr_0.lock.dep_map.key = 0 [L7367] __constr_expr_0.lock.dep_map.class_cache[0] = 0 [L7368] __constr_expr_0.lock.dep_map.class_cache[1] = 0 [L7369] __constr_expr_0.lock.dep_map.name = "(*sem).lock" [L7370] __constr_expr_0.lock.dep_map.cpu = 0 [L7371] __constr_expr_0.lock.dep_map.ip = 0UL [L7372] __constr_expr_0.count = (unsigned int )val [L7373] __constr_expr_0.wait_list.next = & sem->wait_list [L7374] __constr_expr_0.wait_list.prev = & sem->wait_list [L7375] *sem = __constr_expr_0 [L7376] FCALL lockdep_init_map(& sem->lock.dep_map, "semaphore->lock", & __key, 0) [L7377] return; [L7377] return; VAL [\old(val)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, sem={163:0}, sem={163:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0, val=1] [L8886] RET sema_init(& add_remove_card_sem, 1) [L8887] CALL, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L9221] ldv_func_ret_type ldv_func_res ; [L9222] int tmp ; [L9224] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9571] return __VERIFIER_nondet_int(); [L9224] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9224] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L9225] ldv_func_res = tmp [L9226] ldv_state_variable_2 = 1 [L9227] usb_counter = 0 [L9228] CALL ldv_usb_driver_2() [L8930] void *tmp ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=1560, tmp___0=-5, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_zalloc(1560UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8932] tmp = ldv_zalloc(1560UL) [L8933] mwifiex_usb_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9228] RET ldv_usb_driver_2() [L9229] return (ldv_func_res); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, ldv_func_arg1={165:0}, ldv_func_arg1={165:0}, ldv_func_arg2={18446744073709551677:18446744073709551646}, ldv_func_arg2={18446744073709551677:18446744073709551646}, ldv_func_arg3={156:0}, ldv_func_arg3={156:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8887] RET, EXPR ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8887] ret = ldv_usb_register_driver_17(& mwifiex_usb_driver, & __this_module, "mwifiex_usb") [L8888] COND FALSE !(ret != 0) [L8891] descriptor___0.modname = "mwifiex_usb" [L8892] descriptor___0.function = "mwifiex_usb_init_module" [L8893] descriptor___0.filename = "/work/ldvuser/mutilin/launch/work/current--X--drivers/net/--X--defaultlinux-3.16-rc1.tar.xz--X--205_9a--X--cpachecker/linux-3.16-rc1.tar.xz/csd_deg_dscv/514/dscv_tempdir/dscv/ri/205_9a/drivers/net/wireless/mwifiex/usb.o.c.prepared" [L8894] descriptor___0.format = "info: Driver registered successfully!\n" [L8895] descriptor___0.lineno = 1054U [L8896] descriptor___0.flags = 0U [L8897] EXPR descriptor___0.flags VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, descriptor={18446744073709551620:0}, descriptor___0={337:0}, descriptor___0.flags=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7336] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, c=0, exp=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, descriptor={18446744073709551620:0}, descriptor___0={337:0}, descriptor___0.flags=0, last_index=0, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8897] tmp___0 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L8898] COND FALSE !(tmp___0 != 0L) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, descriptor={18446744073709551620:0}, descriptor___0={337:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8903] return (ret); [L8903] return (ret); [L8903] return (ret); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=0, set_impl={167:0}, tmp=0, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9070] RET, EXPR mwifiex_usb_init_module() [L9070] ldv_retval_0 = mwifiex_usb_init_module() [L9071] COND TRUE ldv_retval_0 == 0 [L9072] ldv_state_variable_0 = 3 [L9073] ldv_state_variable_1 = 1 [L9074] CALL ldv_initialize_mwifiex_if_ops_1() [L8939] void *tmp ; [L8940] void *tmp___0 ; VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] CALL, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=6864, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=6864, tmp___0=-6, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] RET, EXPR ldv_zalloc(6864UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(6864UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8942] tmp = ldv_zalloc(6864UL) [L8943] usb_ops_group0 = (struct mwifiex_adapter *)tmp VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=232, tmp___0=-7, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8944] tmp___0 = ldv_zalloc(232UL) [L8945] usb_ops_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9074] RET ldv_initialize_mwifiex_if_ops_1() [L9077] COND FALSE !(ldv_retval_0 != 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8983] COND TRUE ldv_state_variable_1 != 0 [L8984] tmp___4 = __VERIFIER_nondet_int() [L8986] case 0: [L8993] case 1: [L9000] case 2: [L9007] case 3: [L9014] case 4: [L9021] case 5: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9022] COND TRUE ldv_state_variable_1 == 1 [L9023] CALL mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L8796] int ret ; [L8797] struct usb_card_rec *card ; [L8799] EXPR adapter->card [L8799] card = (struct usb_card_rec *)adapter->card [L8800] EXPR card->usb_boot_state VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->usb_boot_state=0, fw={0:0}, fw={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8800] COND FALSE !((unsigned int )card->usb_boot_state == 1U) [L8812] CALL, EXPR mwifiex_usb_rx_init(adapter) [L8393] struct usb_card_rec *card ; [L8394] int i ; [L8395] int tmp ; [L8396] int tmp___0 ; [L8398] EXPR adapter->card [L8398] card = (struct usb_card_rec *)adapter->card [L8399] card->rx_cmd.adapter = adapter [L8400] EXPR card->rx_cmd_ep [L8400] card->rx_cmd.ep = card->rx_cmd_ep [L8401] CALL, EXPR usb_alloc_urb(0, 208U) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7271] void *p ; [L7272] void *tmp ; [L7273] int tmp___0 ; [L7275] tmp___0 = __VERIFIER_nondet_int() [L7276] COND FALSE !(tmp___0 != 0) [L7279] tmp = malloc(size) [L7280] p = tmp VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7281] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=184, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7282] return (p); VAL [\old(size)=184, \result={-18446744073709551615:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={-18446744073709551615:0}, ref_cnt=0, set_impl={167:0}, size=184, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [\old(arg0)=0, \old(arg1)=208, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, arg0=0, arg1=208, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9548] return ldv_malloc(sizeof(struct urb)); [L8401] RET, EXPR usb_alloc_urb(0, 208U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_alloc_urb(0, 208U)={-18446744073709551615:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8401] card->rx_cmd.urb = usb_alloc_urb(0, 208U) [L8402] EXPR card->rx_cmd.urb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.urb={-18446744073709551615:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8402] COND FALSE !((unsigned long )card->rx_cmd.urb == (unsigned long )((struct urb *)0)) [L8407] CALL, EXPR ldv_dev_alloc_skb_14(2048U) VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND FALSE !(tmp___0 != 0) [L7296] EXPR, FCALL calloc(1UL, size) [L7296] tmp = calloc(1UL, size) [L7297] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, calloc(1UL, size)={169:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={169:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={169:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7267] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, cond=1, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7298] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, calloc(1UL, size)={169:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={169:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={169:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7299] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={169:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, calloc(1UL, size)={169:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, p={169:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp={169:0}, tmp___0=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={169:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={169:0}, tmp___7={169:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND FALSE !(! skb) [L9387] CALL ldv_set_add(LDV_SKBS, skb) [L9255] int i ; [L9257] i = 0 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, e={169:0}, e={169:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9258] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, e={169:0}, e={169:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9259] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, e={169:0}, e={169:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9269] COND TRUE last_index < 15 [L9270] set_impl[last_index] = e [L9271] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, e={169:0}, e={169:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9387] RET ldv_set_add(LDV_SKBS, skb) [L9388] return (skb); VAL [\old(last_index)=0, \result={169:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={169:0}, tmp___7={169:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={169:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=0, \old(length)=2048, \result={169:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={169:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] RET, EXPR ldv_dev_alloc_skb_14(2048U) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, ldv_dev_alloc_skb_14(2048U)={169:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8407] card->rx_cmd.skb = ldv_dev_alloc_skb_14(2048U) [L8408] EXPR card->rx_cmd.skb VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, card->rx_cmd.skb={169:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8408] COND FALSE !((unsigned long )card->rx_cmd.skb == (unsigned long )((struct sk_buff *)0)) [L8413] CALL, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7841] struct mwifiex_adapter *adapter ; [L7842] struct usb_card_rec *card ; [L7843] unsigned int tmp ; [L7844] int tmp___0 ; [L7846] EXPR ctx->adapter [L7846] adapter = ctx->adapter [L7847] EXPR adapter->card [L7847] card = (struct usb_card_rec *)adapter->card [L7848] EXPR card->rx_cmd_ep [L7848] EXPR ctx->ep VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={169:0}, add_remove_card_sem={163:0}, card={18446744073709551678:-25}, card->rx_cmd_ep=257, ctx={167:0}, ctx={167:0}, ctx->ep=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7848] COND TRUE (int )card->rx_cmd_ep != (int )ctx->ep [L7849] CALL, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9212] struct sk_buff *tmp ; VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9379] void *skb ; [L9380] void *tmp___7 ; VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7288] void *p ; [L7289] void *tmp ; [L7290] int tmp___0 ; [L7292] tmp___0 = __VERIFIER_nondet_int() [L7293] COND TRUE tmp___0 != 0 [L7294] return ((void *)0); VAL [\old(last_index)=1, \old(size)=248, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=248, tmp___0=-9, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9382] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L9383] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9384] COND TRUE ! skb [L9385] return ((void *)0); VAL [\old(last_index)=1, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, skb={0:0}, tmp___7={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=1, \old(length)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_skb_alloc()={0:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9214] tmp = ldv_skb_alloc() [L9215] return (tmp); VAL [\old(last_index)=1, \old(length)=2048, \result={0:0}, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, length=2048, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp={0:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] RET, EXPR ldv_dev_alloc_skb_14((unsigned int )size) VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={169:0}, add_remove_card_sem={163:0}, card={18446744073709551678:-25}, ctx={167:0}, ctx={167:0}, last_index=1, ldv_dev_alloc_skb_14((unsigned int )size)={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7849] ctx->skb = ldv_dev_alloc_skb_14((unsigned int )size) [L7850] EXPR ctx->skb VAL [\old(last_index)=1, \old(size)=2048, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={169:0}, add_remove_card_sem={163:0}, card={18446744073709551678:-25}, ctx={167:0}, ctx={167:0}, ctx->skb={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L7850] COND TRUE (unsigned long )ctx->skb == (unsigned long )((struct sk_buff *)0) [L7851] adapter->dev [L7853] return (-12); VAL [\old(last_index)=1, \old(size)=2048, \result=-12, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={169:0}, add_remove_card_sem={163:0}, card={18446744073709551678:-25}, ctx={167:0}, ctx={167:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, size=2048, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] RET, EXPR mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048)=-12, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8413] tmp = mwifiex_usb_submit_rx_urb(& card->rx_cmd, 2048) [L8414] COND TRUE tmp != 0 [L8415] return (-1); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=-12, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8812] RET, EXPR mwifiex_usb_rx_init(adapter) [L8812] ret = mwifiex_usb_rx_init(adapter) [L8813] COND FALSE !(ret == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=-1, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8817] return (ret); VAL [\result=-1, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, adapter={0:0}, adapter={0:0}, add_remove_card_sem={163:0}, card={167:-25}, fw={0:0}, fw={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, ret=-1, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9023] RET mwifiex_usb_dnld_fw(usb_ops_group0, ldvarg2) [L9024] ldv_state_variable_1 = 1 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=0, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8980] tmp___3 = __VERIFIER_nondet_int() [L8982] case 0: [L9056] case 1: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9057] COND TRUE ldv_state_variable_0 != 0 [L9058] tmp___5 = __VERIFIER_nondet_int() [L9060] case 0: VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L9061] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L9062] CALL mwifiex_usb_cleanup_module() [L8908] int tmp ; [L8910] CALL, EXPR down_interruptible(& add_remove_card_sem) [L9477] return __VERIFIER_nondet_int(); [L8910] RET, EXPR down_interruptible(& add_remove_card_sem) [L8910] tmp = down_interruptible(& add_remove_card_sem) [L8911] COND FALSE !(tmp == 0) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=1, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=0] [L8915] user_rmmod = 1U [L8916] CALL ldv_usb_deregister_18(& mwifiex_usb_driver) [L9235] FCALL usb_deregister(arg) [L9236] ldv_state_variable_2 = 0 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, arg={165:0}, arg={165:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L8916] RET ldv_usb_deregister_18(& mwifiex_usb_driver) [L9062] RET mwifiex_usb_cleanup_module() [L9063] ldv_state_variable_0 = 2 VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, ldvarg0={0:0}, ldvarg1=7, ldvarg2={0:0}, ldvarg3={18446744073709551619:0}, ldvarg4={0:0}, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp=7, tmp___0={0:0}, tmp___1={0:0}, tmp___2={0:0}, tmp___3=1, tmp___4=5, tmp___5=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9164] CALL ldv_check_final_state() [L9446] int tmp___7 ; [L9448] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L9337] return (last_index == 0); VAL [\result=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9448] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L9448] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L9449] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, tmp___7=0, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L9451] CALL ldv_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] [L7323] reach_error() VAL [__mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __mod_usb__mwifiex_usb_table_device_table=0, __this_module={18446744073709551677:18446744073709551646}, add_remove_card_sem={163:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=0, mwifiex_usb_driver={165:0}, mwifiex_usb_driver_group1={0:0}, mwifiex_usb_table={164:0}, ref_cnt=0, set_impl={167:0}, usb_counter=0, usb_ops={166:0}, usb_ops_group0={0:0}, usb_ops_group1={0:0}, user_rmmod=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 39 procedures, 679 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 111.3s, OverallIterations: 15, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 98.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 31 mSolverCounterUnknown, 9986 SdHoareTripleChecker+Valid, 95.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 9186 mSDsluCounter, 73913 SdHoareTripleChecker+Invalid, 90.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 60190 mSDsCounter, 5683 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 23953 IncrementalHoareTripleChecker+Invalid, 29667 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 5683 mSolverCounterUnsat, 13723 mSDtfsCounter, 23953 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1161 GetRequests, 991 SyntacticMatches, 1 SemanticMatches, 169 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 244 ImplicationChecksByTransitivity, 2.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=5704occurred in iteration=4, InterpolantAutomatonStates: 139, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.5s AutomataMinimizationTime, 14 MinimizatonAttempts, 4695 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 3.2s SatisfiabilityAnalysisTime, 4.3s InterpolantComputationTime, 2577 NumberOfCodeBlocks, 2577 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 2531 ConstructedInterpolants, 0 QuantifiedInterpolants, 5146 SizeOfPredicates, 17 NumberOfNonLiveVariables, 7404 ConjunctsInSsa, 80 ConjunctsInUnsatCore, 18 InterpolantComputations, 13 PerfectInterpolantSequences, 1547/1552 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-21 11:14:45,652 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 11:14:47,428 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 11:14:47,430 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 11:14:47,461 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 11:14:47,462 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 11:14:47,463 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 11:14:47,466 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 11:14:47,472 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 11:14:47,473 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 11:14:47,476 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 11:14:47,477 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 11:14:47,480 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 11:14:47,480 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 11:14:47,482 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 11:14:47,482 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 11:14:47,484 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 11:14:47,485 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 11:14:47,486 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 11:14:47,487 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 11:14:47,491 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 11:14:47,492 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 11:14:47,493 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 11:14:47,494 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 11:14:47,494 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 11:14:47,495 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 11:14:47,500 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 11:14:47,501 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 11:14:47,501 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 11:14:47,501 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 11:14:47,501 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 11:14:47,502 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 11:14:47,502 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 11:14:47,503 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 11:14:47,503 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 11:14:47,504 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 11:14:47,505 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 11:14:47,505 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 11:14:47,505 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 11:14:47,506 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 11:14:47,506 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 11:14:47,507 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 11:14:47,507 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 11:14:47,511 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-07-21 11:14:47,528 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 11:14:47,528 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 11:14:47,528 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 11:14:47,528 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 11:14:47,528 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 11:14:47,529 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 11:14:47,529 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 11:14:47,529 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 11:14:47,529 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 11:14:47,529 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 11:14:47,529 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 11:14:47,529 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 11:14:47,529 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 11:14:47,530 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 11:14:47,530 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 11:14:47,530 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 11:14:47,531 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 11:14:47,531 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 11:14:47,531 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-07-21 11:14:47,531 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-07-21 11:14:47,531 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 11:14:47,531 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 11:14:47,531 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 11:14:47,531 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-07-21 11:14:47,531 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 03d55f274509719e259063891bf7f51d6ae3645569d8243a0d7434c1b24ad753 [2022-07-21 11:14:47,761 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 11:14:47,774 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 11:14:47,776 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 11:14:47,776 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 11:14:47,777 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 11:14:47,777 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-07-21 11:14:47,811 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5b737e780/b4dd6eb44ea64342ad83cc2d908b1bfc/FLAG866da1c68 [2022-07-21 11:14:48,476 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 11:14:48,477 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-07-21 11:14:48,507 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5b737e780/b4dd6eb44ea64342ad83cc2d908b1bfc/FLAG866da1c68 [2022-07-21 11:14:48,859 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5b737e780/b4dd6eb44ea64342ad83cc2d908b1bfc [2022-07-21 11:14:48,861 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 11:14:48,861 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 11:14:48,862 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 11:14:48,862 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 11:14:48,865 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 11:14:48,866 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 11:14:48" (1/1) ... [2022-07-21 11:14:48,868 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4bb81701 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:48, skipping insertion in model container [2022-07-21 11:14:48,868 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 11:14:48" (1/1) ... [2022-07-21 11:14:48,873 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 11:14:48,959 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 11:14:49,555 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-07-21 11:14:50,038 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:14:50,074 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-07-21 11:14:50,108 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 11:14:50,216 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-07-21 11:14:50,342 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:14:50,363 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 11:14:50,500 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i[206925,206938] [2022-07-21 11:14:50,577 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:14:50,658 INFO L208 MainTranslator]: Completed translation [2022-07-21 11:14:50,658 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50 WrapperNode [2022-07-21 11:14:50,659 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 11:14:50,660 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 11:14:50,660 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 11:14:50,660 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 11:14:50,665 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,720 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,770 INFO L137 Inliner]: procedures = 172, calls = 1181, calls flagged for inlining = 63, calls inlined = 51, statements flattened = 2247 [2022-07-21 11:14:50,770 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 11:14:50,770 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 11:14:50,771 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 11:14:50,771 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 11:14:50,797 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,797 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,806 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,806 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,865 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,884 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,899 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,916 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 11:14:50,918 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 11:14:50,918 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 11:14:50,919 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 11:14:50,919 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (1/1) ... [2022-07-21 11:14:50,924 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 11:14:50,930 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 11:14:50,939 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 11:14:50,941 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 11:14:50,966 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2022-07-21 11:14:50,966 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2022-07-21 11:14:50,966 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_alloc_skb_14 [2022-07-21 11:14:50,966 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_alloc_skb_14 [2022-07-21 11:14:50,967 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-07-21 11:14:50,967 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_strcpy [2022-07-21 11:14:50,967 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_strcpy [2022-07-21 11:14:50,967 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_intfdata [2022-07-21 11:14:50,967 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_intfdata [2022-07-21 11:14:50,967 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2022-07-21 11:14:50,968 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2022-07-21 11:14:50,968 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-07-21 11:14:50,968 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-07-21 11:14:50,968 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-07-21 11:14:50,968 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-07-21 11:14:50,969 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-07-21 11:14:50,969 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2022-07-21 11:14:50,969 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2022-07-21 11:14:50,969 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-21 11:14:50,969 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-21 11:14:50,969 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-07-21 11:14:50,969 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-07-21 11:14:50,969 INFO L130 BoogieDeclarations]: Found specification of procedure skb_push [2022-07-21 11:14:50,969 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_push [2022-07-21 11:14:50,970 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_disconnect [2022-07-21 11:14:50,970 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_disconnect [2022-07-21 11:14:50,970 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-07-21 11:14:50,970 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-07-21 11:14:50,970 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-07-21 11:14:50,970 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-07-21 11:14:50,970 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-21 11:14:50,971 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-21 11:14:50,971 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2022-07-21 11:14:50,971 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2022-07-21 11:14:50,971 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_get_priv [2022-07-21 11:14:50,971 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_get_priv [2022-07-21 11:14:50,971 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_submit_rx_urb [2022-07-21 11:14:50,971 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_submit_rx_urb [2022-07-21 11:14:50,971 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-07-21 11:14:50,972 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-07-21 11:14:50,972 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-21 11:14:50,972 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-21 11:14:50,972 INFO L130 BoogieDeclarations]: Found specification of procedure usb_fill_bulk_urb [2022-07-21 11:14:50,972 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_fill_bulk_urb [2022-07-21 11:14:50,972 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-21 11:14:50,972 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-21 11:14:50,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-07-21 11:14:50,973 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_in [2022-07-21 11:14:50,973 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_in [2022-07-21 11:14:50,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-07-21 11:14:50,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-07-21 11:14:50,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-07-21 11:14:50,975 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-21 11:14:50,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-21 11:14:50,975 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-07-21 11:14:50,975 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-07-21 11:14:50,975 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-21 11:14:50,976 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-21 11:14:50,976 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-21 11:14:50,976 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-21 11:14:50,976 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-21 11:14:50,976 INFO L130 BoogieDeclarations]: Found specification of procedure dev_kfree_skb_any [2022-07-21 11:14:50,976 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_kfree_skb_any [2022-07-21 11:14:50,976 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 11:14:50,977 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_inc [2022-07-21 11:14:50,977 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_inc [2022-07-21 11:14:50,977 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-21 11:14:50,977 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-21 11:14:50,978 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-07-21 11:14:50,978 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-07-21 11:14:50,978 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-07-21 11:14:50,978 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_cmd_event_complete [2022-07-21 11:14:50,978 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_cmd_event_complete [2022-07-21 11:14:50,978 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-21 11:14:50,978 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_dec [2022-07-21 11:14:50,978 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_dec [2022-07-21 11:14:50,978 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_num [2022-07-21 11:14:50,979 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_num [2022-07-21 11:14:50,979 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2022-07-21 11:14:50,979 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2022-07-21 11:14:50,979 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-07-21 11:14:50,979 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-07-21 11:14:50,979 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-07-21 11:14:50,979 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-21 11:14:50,980 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-07-21 11:14:50,980 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-21 11:14:50,980 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-07-21 11:14:50,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-07-21 11:14:50,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-07-21 11:14:50,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-07-21 11:14:50,981 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-07-21 11:14:50,981 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-07-21 11:14:50,981 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2022-07-21 11:14:50,982 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2022-07-21 11:14:50,982 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-07-21 11:14:50,982 INFO L130 BoogieDeclarations]: Found specification of procedure mwifiex_usb_resume [2022-07-21 11:14:50,982 INFO L138 BoogieDeclarations]: Found implementation of procedure mwifiex_usb_resume [2022-07-21 11:14:50,982 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_usbdev [2022-07-21 11:14:50,982 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_usbdev [2022-07-21 11:14:50,983 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2022-07-21 11:14:50,983 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2022-07-21 11:14:50,983 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_u8 [2022-07-21 11:14:50,983 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-21 11:14:50,983 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-21 11:14:50,983 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 11:14:50,983 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 11:14:50,983 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_dir_out [2022-07-21 11:14:50,984 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_dir_out [2022-07-21 11:14:51,393 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 11:14:51,395 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 11:14:51,518 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-21 11:15:08,224 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 11:15:08,236 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 11:15:08,255 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-21 11:15:08,260 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:15:08 BoogieIcfgContainer [2022-07-21 11:15:08,261 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 11:15:08,263 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 11:15:08,264 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 11:15:08,266 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 11:15:08,274 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 11:14:48" (1/3) ... [2022-07-21 11:15:08,275 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2720a312 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 11:15:08, skipping insertion in model container [2022-07-21 11:15:08,280 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:14:50" (2/3) ... [2022-07-21 11:15:08,281 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2720a312 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 11:15:08, skipping insertion in model container [2022-07-21 11:15:08,281 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:15:08" (3/3) ... [2022-07-21 11:15:08,282 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--mwifiex--mwifiex_usb.ko-entry_point.cil.out.i [2022-07-21 11:15:08,297 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 11:15:08,310 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 11:15:08,414 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 11:15:08,426 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@7b070ba6, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@2a417dc3 [2022-07-21 11:15:08,427 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 11:15:08,442 INFO L276 IsEmpty]: Start isEmpty. Operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) [2022-07-21 11:15:08,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-21 11:15:08,460 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:08,465 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:08,468 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:08,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:08,474 INFO L85 PathProgramCache]: Analyzing trace with hash -1998328016, now seen corresponding path program 1 times [2022-07-21 11:15:08,486 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:08,486 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2003189205] [2022-07-21 11:15:08,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:08,487 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:08,487 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:08,507 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:08,516 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-07-21 11:15:09,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:09,027 INFO L263 TraceCheckSpWp]: Trace formula consists of 793 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-21 11:15:09,031 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:09,251 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-21 11:15:09,251 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:09,251 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:09,251 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2003189205] [2022-07-21 11:15:09,252 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2003189205] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:09,252 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:09,252 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-21 11:15:09,253 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1322569783] [2022-07-21 11:15:09,253 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:09,256 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-21 11:15:09,256 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:09,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-21 11:15:09,309 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-21 11:15:09,312 INFO L87 Difference]: Start difference. First operand has 678 states, 502 states have (on average 1.3764940239043826) internal successors, (691), 515 states have internal predecessors, (691), 137 states have call successors, (137), 38 states have call predecessors, (137), 37 states have return successors, (133), 130 states have call predecessors, (133), 133 states have call successors, (133) Second operand has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-21 11:15:09,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:09,496 INFO L93 Difference]: Finished difference Result 1354 states and 1960 transitions. [2022-07-21 11:15:09,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-21 11:15:09,499 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 45 [2022-07-21 11:15:09,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:09,511 INFO L225 Difference]: With dead ends: 1354 [2022-07-21 11:15:09,511 INFO L226 Difference]: Without dead ends: 668 [2022-07-21 11:15:09,517 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-21 11:15:09,519 INFO L413 NwaCegarLoop]: 952 mSDtfsCounter, 2 mSDsluCounter, 1901 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 2853 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:09,519 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 2853 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 11:15:09,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 668 states. [2022-07-21 11:15:09,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 668 to 668. [2022-07-21 11:15:09,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 668 states, 498 states have (on average 1.359437751004016) internal successors, (677), 505 states have internal predecessors, (677), 133 states have call successors, (133), 37 states have call predecessors, (133), 36 states have return successors, (132), 129 states have call predecessors, (132), 132 states have call successors, (132) [2022-07-21 11:15:09,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 668 states to 668 states and 942 transitions. [2022-07-21 11:15:09,587 INFO L78 Accepts]: Start accepts. Automaton has 668 states and 942 transitions. Word has length 45 [2022-07-21 11:15:09,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:09,588 INFO L495 AbstractCegarLoop]: Abstraction has 668 states and 942 transitions. [2022-07-21 11:15:09,589 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-21 11:15:09,589 INFO L276 IsEmpty]: Start isEmpty. Operand 668 states and 942 transitions. [2022-07-21 11:15:09,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-21 11:15:09,593 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:09,594 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:09,623 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-07-21 11:15:09,808 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:09,808 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:09,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:09,811 INFO L85 PathProgramCache]: Analyzing trace with hash 1712559836, now seen corresponding path program 1 times [2022-07-21 11:15:09,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:09,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [875280341] [2022-07-21 11:15:09,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:09,814 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:09,815 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:09,831 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:09,846 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-07-21 11:15:10,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:10,276 INFO L263 TraceCheckSpWp]: Trace formula consists of 804 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-21 11:15:10,278 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:10,453 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-21 11:15:10,453 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 11:15:10,896 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-21 11:15:10,897 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:10,897 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [875280341] [2022-07-21 11:15:10,897 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [875280341] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 11:15:10,897 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-07-21 11:15:10,897 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2022-07-21 11:15:10,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394237174] [2022-07-21 11:15:10,897 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-07-21 11:15:10,898 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 11:15:10,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:10,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 11:15:10,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-21 11:15:10,899 INFO L87 Difference]: Start difference. First operand 668 states and 942 transitions. Second operand has 8 states, 8 states have (on average 4.375) internal successors, (35), 8 states have internal predecessors, (35), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2022-07-21 11:15:11,573 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:11,573 INFO L93 Difference]: Finished difference Result 1336 states and 1886 transitions. [2022-07-21 11:15:11,574 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-21 11:15:11,575 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 8 states have internal predecessors, (35), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 46 [2022-07-21 11:15:11,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:11,578 INFO L225 Difference]: With dead ends: 1336 [2022-07-21 11:15:11,578 INFO L226 Difference]: Without dead ends: 677 [2022-07-21 11:15:11,580 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=53, Invalid=79, Unknown=0, NotChecked=0, Total=132 [2022-07-21 11:15:11,581 INFO L413 NwaCegarLoop]: 939 mSDtfsCounter, 11 mSDsluCounter, 2812 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 3751 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:11,581 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 3751 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 11:15:11,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 677 states. [2022-07-21 11:15:11,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 677 to 677. [2022-07-21 11:15:11,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 677 states, 506 states have (on average 1.359683794466403) internal successors, (688), 513 states have internal predecessors, (688), 133 states have call successors, (133), 38 states have call predecessors, (133), 37 states have return successors, (132), 129 states have call predecessors, (132), 132 states have call successors, (132) [2022-07-21 11:15:11,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 677 states to 677 states and 953 transitions. [2022-07-21 11:15:11,605 INFO L78 Accepts]: Start accepts. Automaton has 677 states and 953 transitions. Word has length 46 [2022-07-21 11:15:11,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:11,605 INFO L495 AbstractCegarLoop]: Abstraction has 677 states and 953 transitions. [2022-07-21 11:15:11,606 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.375) internal successors, (35), 8 states have internal predecessors, (35), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2022-07-21 11:15:11,606 INFO L276 IsEmpty]: Start isEmpty. Operand 677 states and 953 transitions. [2022-07-21 11:15:11,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-21 11:15:11,607 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:11,607 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:11,637 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:11,812 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:11,813 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:11,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:11,814 INFO L85 PathProgramCache]: Analyzing trace with hash 728136240, now seen corresponding path program 2 times [2022-07-21 11:15:11,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:11,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1036703237] [2022-07-21 11:15:11,814 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-07-21 11:15:11,815 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:11,815 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:11,818 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:11,824 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-07-21 11:15:12,187 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2022-07-21 11:15:12,187 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-07-21 11:15:12,204 INFO L263 TraceCheckSpWp]: Trace formula consists of 755 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-21 11:15:12,206 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:12,295 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-07-21 11:15:12,295 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:12,295 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:12,295 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1036703237] [2022-07-21 11:15:12,295 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1036703237] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:12,295 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:12,295 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 11:15:12,295 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1597484864] [2022-07-21 11:15:12,295 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:12,296 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 11:15:12,296 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:12,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 11:15:12,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 11:15:12,296 INFO L87 Difference]: Start difference. First operand 677 states and 953 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-21 11:15:12,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:12,622 INFO L93 Difference]: Finished difference Result 1955 states and 2762 transitions. [2022-07-21 11:15:12,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 11:15:12,622 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 49 [2022-07-21 11:15:12,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:12,629 INFO L225 Difference]: With dead ends: 1955 [2022-07-21 11:15:12,629 INFO L226 Difference]: Without dead ends: 1298 [2022-07-21 11:15:12,631 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 47 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 11:15:12,633 INFO L413 NwaCegarLoop]: 1075 mSDtfsCounter, 895 mSDsluCounter, 906 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 895 SdHoareTripleChecker+Valid, 1981 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:12,637 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [895 Valid, 1981 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 11:15:12,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1298 states. [2022-07-21 11:15:12,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1298 to 1298. [2022-07-21 11:15:12,677 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1298 states, 968 states have (on average 1.3646694214876034) internal successors, (1321), 982 states have internal predecessors, (1321), 256 states have call successors, (256), 74 states have call predecessors, (256), 73 states have return successors, (255), 249 states have call predecessors, (255), 255 states have call successors, (255) [2022-07-21 11:15:12,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1298 states to 1298 states and 1832 transitions. [2022-07-21 11:15:12,684 INFO L78 Accepts]: Start accepts. Automaton has 1298 states and 1832 transitions. Word has length 49 [2022-07-21 11:15:12,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:12,684 INFO L495 AbstractCegarLoop]: Abstraction has 1298 states and 1832 transitions. [2022-07-21 11:15:12,685 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-21 11:15:12,685 INFO L276 IsEmpty]: Start isEmpty. Operand 1298 states and 1832 transitions. [2022-07-21 11:15:12,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-07-21 11:15:12,688 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:12,688 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:12,714 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:12,903 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:12,903 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:12,903 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:12,904 INFO L85 PathProgramCache]: Analyzing trace with hash -602378178, now seen corresponding path program 1 times [2022-07-21 11:15:12,905 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:12,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [172923143] [2022-07-21 11:15:12,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:12,905 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:12,905 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:12,920 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:12,933 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-07-21 11:15:13,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:13,717 INFO L263 TraceCheckSpWp]: Trace formula consists of 1306 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-21 11:15:13,754 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:13,985 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-07-21 11:15:13,986 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:13,986 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:13,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [172923143] [2022-07-21 11:15:13,986 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [172923143] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:13,986 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:13,986 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 11:15:13,986 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [553289945] [2022-07-21 11:15:13,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:13,986 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 11:15:13,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:13,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 11:15:13,987 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 11:15:13,987 INFO L87 Difference]: Start difference. First operand 1298 states and 1832 transitions. Second operand has 6 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-21 11:15:15,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:15,589 INFO L93 Difference]: Finished difference Result 2925 states and 4194 transitions. [2022-07-21 11:15:15,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 11:15:15,590 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 67 [2022-07-21 11:15:15,591 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:15,597 INFO L225 Difference]: With dead ends: 2925 [2022-07-21 11:15:15,598 INFO L226 Difference]: Without dead ends: 1647 [2022-07-21 11:15:15,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:15:15,602 INFO L413 NwaCegarLoop]: 1450 mSDtfsCounter, 431 mSDsluCounter, 5279 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 516 SdHoareTripleChecker+Valid, 6729 SdHoareTripleChecker+Invalid, 146 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:15,602 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [516 Valid, 6729 Invalid, 146 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-07-21 11:15:15,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1647 states. [2022-07-21 11:15:15,630 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1647 to 1298. [2022-07-21 11:15:15,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1298 states, 968 states have (on average 1.3636363636363635) internal successors, (1320), 982 states have internal predecessors, (1320), 256 states have call successors, (256), 74 states have call predecessors, (256), 73 states have return successors, (255), 249 states have call predecessors, (255), 255 states have call successors, (255) [2022-07-21 11:15:15,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1298 states to 1298 states and 1831 transitions. [2022-07-21 11:15:15,637 INFO L78 Accepts]: Start accepts. Automaton has 1298 states and 1831 transitions. Word has length 67 [2022-07-21 11:15:15,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:15,637 INFO L495 AbstractCegarLoop]: Abstraction has 1298 states and 1831 transitions. [2022-07-21 11:15:15,637 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-21 11:15:15,637 INFO L276 IsEmpty]: Start isEmpty. Operand 1298 states and 1831 transitions. [2022-07-21 11:15:15,639 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-07-21 11:15:15,639 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:15,640 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:15,667 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:15,853 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:15,853 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:15,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:15,853 INFO L85 PathProgramCache]: Analyzing trace with hash 1887150784, now seen corresponding path program 1 times [2022-07-21 11:15:15,854 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:15,854 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1834652138] [2022-07-21 11:15:15,854 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:15,854 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:15,855 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:15,857 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:15,859 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-07-21 11:15:16,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:16,798 INFO L263 TraceCheckSpWp]: Trace formula consists of 1306 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-21 11:15:16,801 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:17,413 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-07-21 11:15:17,413 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:17,413 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:17,414 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1834652138] [2022-07-21 11:15:17,414 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1834652138] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:17,414 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:17,414 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 11:15:17,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [656083940] [2022-07-21 11:15:17,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:17,414 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 11:15:17,414 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:17,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 11:15:17,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 11:15:17,415 INFO L87 Difference]: Start difference. First operand 1298 states and 1831 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 11:15:17,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:17,844 INFO L93 Difference]: Finished difference Result 3851 states and 5499 transitions. [2022-07-21 11:15:17,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 11:15:17,845 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 67 [2022-07-21 11:15:17,846 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:17,858 INFO L225 Difference]: With dead ends: 3851 [2022-07-21 11:15:17,860 INFO L226 Difference]: Without dead ends: 2563 [2022-07-21 11:15:17,864 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:15:17,865 INFO L413 NwaCegarLoop]: 1121 mSDtfsCounter, 895 mSDsluCounter, 3175 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 895 SdHoareTripleChecker+Valid, 4296 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:17,865 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [895 Valid, 4296 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 11:15:17,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2563 states. [2022-07-21 11:15:17,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2563 to 2563. [2022-07-21 11:15:17,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2563 states, 1910 states have (on average 1.3638743455497382) internal successors, (2605), 1938 states have internal predecessors, (2605), 507 states have call successors, (507), 146 states have call predecessors, (507), 145 states have return successors, (536), 494 states have call predecessors, (536), 506 states have call successors, (536) [2022-07-21 11:15:17,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2563 states to 2563 states and 3648 transitions. [2022-07-21 11:15:17,923 INFO L78 Accepts]: Start accepts. Automaton has 2563 states and 3648 transitions. Word has length 67 [2022-07-21 11:15:17,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:17,924 INFO L495 AbstractCegarLoop]: Abstraction has 2563 states and 3648 transitions. [2022-07-21 11:15:17,925 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 11:15:17,925 INFO L276 IsEmpty]: Start isEmpty. Operand 2563 states and 3648 transitions. [2022-07-21 11:15:17,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-07-21 11:15:17,930 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:17,930 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:17,959 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:18,147 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:18,147 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:18,148 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:18,148 INFO L85 PathProgramCache]: Analyzing trace with hash 510620113, now seen corresponding path program 1 times [2022-07-21 11:15:18,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:18,149 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [622618774] [2022-07-21 11:15:18,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:18,149 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:18,150 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:18,151 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:18,152 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-07-21 11:15:18,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:19,014 INFO L263 TraceCheckSpWp]: Trace formula consists of 1493 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-21 11:15:19,017 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:19,084 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-07-21 11:15:19,085 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:19,085 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:19,085 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [622618774] [2022-07-21 11:15:19,085 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [622618774] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:19,085 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:19,085 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 11:15:19,085 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1928465101] [2022-07-21 11:15:19,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:19,085 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 11:15:19,085 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:19,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 11:15:19,088 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 11:15:19,089 INFO L87 Difference]: Start difference. First operand 2563 states and 3648 transitions. Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-21 11:15:20,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:20,271 INFO L93 Difference]: Finished difference Result 6763 states and 9544 transitions. [2022-07-21 11:15:20,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 11:15:20,272 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 117 [2022-07-21 11:15:20,272 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:20,286 INFO L225 Difference]: With dead ends: 6763 [2022-07-21 11:15:20,286 INFO L226 Difference]: Without dead ends: 4218 [2022-07-21 11:15:20,291 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 11:15:20,292 INFO L413 NwaCegarLoop]: 1095 mSDtfsCounter, 603 mSDsluCounter, 894 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 603 SdHoareTripleChecker+Valid, 1989 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:20,292 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [603 Valid, 1989 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-07-21 11:15:20,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4218 states. [2022-07-21 11:15:20,370 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4218 to 4205. [2022-07-21 11:15:20,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4205 states, 3114 states have (on average 1.3477842003853564) internal successors, (4197), 3162 states have internal predecessors, (4197), 829 states have call successors, (829), 262 states have call predecessors, (829), 261 states have return successors, (876), 808 states have call predecessors, (876), 828 states have call successors, (876) [2022-07-21 11:15:20,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4205 states to 4205 states and 5902 transitions. [2022-07-21 11:15:20,386 INFO L78 Accepts]: Start accepts. Automaton has 4205 states and 5902 transitions. Word has length 117 [2022-07-21 11:15:20,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:20,386 INFO L495 AbstractCegarLoop]: Abstraction has 4205 states and 5902 transitions. [2022-07-21 11:15:20,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-21 11:15:20,387 INFO L276 IsEmpty]: Start isEmpty. Operand 4205 states and 5902 transitions. [2022-07-21 11:15:20,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2022-07-21 11:15:20,395 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:20,395 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:20,424 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:20,621 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:20,622 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:20,622 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:20,622 INFO L85 PathProgramCache]: Analyzing trace with hash -1507578268, now seen corresponding path program 1 times [2022-07-21 11:15:20,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:20,623 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [373036180] [2022-07-21 11:15:20,623 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:20,623 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:20,623 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:20,625 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:20,626 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-07-21 11:15:21,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:21,509 INFO L263 TraceCheckSpWp]: Trace formula consists of 1513 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-21 11:15:21,513 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:21,605 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-07-21 11:15:21,606 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:21,606 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:21,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [373036180] [2022-07-21 11:15:21,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [373036180] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:21,606 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:21,606 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 11:15:21,606 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1498197275] [2022-07-21 11:15:21,606 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:21,606 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 11:15:21,607 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:21,607 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 11:15:21,607 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 11:15:21,607 INFO L87 Difference]: Start difference. First operand 4205 states and 5902 transitions. Second operand has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-21 11:15:21,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:21,913 INFO L93 Difference]: Finished difference Result 9818 states and 13766 transitions. [2022-07-21 11:15:21,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 11:15:21,914 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) Word has length 134 [2022-07-21 11:15:21,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:21,944 INFO L225 Difference]: With dead ends: 9818 [2022-07-21 11:15:21,944 INFO L226 Difference]: Without dead ends: 5633 [2022-07-21 11:15:21,958 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 11:15:21,960 INFO L413 NwaCegarLoop]: 1279 mSDtfsCounter, 484 mSDsluCounter, 900 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 2179 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:21,960 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [484 Valid, 2179 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 11:15:21,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5633 states. [2022-07-21 11:15:22,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5633 to 5598. [2022-07-21 11:15:22,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5598 states, 4174 states have (on average 1.35361763296598) internal successors, (5650), 4242 states have internal predecessors, (5650), 1066 states have call successors, (1066), 358 states have call predecessors, (1066), 357 states have return successors, (1129), 1029 states have call predecessors, (1129), 1065 states have call successors, (1129) [2022-07-21 11:15:22,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5598 states to 5598 states and 7845 transitions. [2022-07-21 11:15:22,149 INFO L78 Accepts]: Start accepts. Automaton has 5598 states and 7845 transitions. Word has length 134 [2022-07-21 11:15:22,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:22,150 INFO L495 AbstractCegarLoop]: Abstraction has 5598 states and 7845 transitions. [2022-07-21 11:15:22,150 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 3 states have internal predecessors, (89), 2 states have call successors, (15), 2 states have call predecessors, (15), 2 states have return successors, (14), 2 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-21 11:15:22,150 INFO L276 IsEmpty]: Start isEmpty. Operand 5598 states and 7845 transitions. [2022-07-21 11:15:22,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-07-21 11:15:22,158 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:22,158 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:22,186 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:22,375 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:22,375 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:22,376 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:22,376 INFO L85 PathProgramCache]: Analyzing trace with hash 1851568064, now seen corresponding path program 1 times [2022-07-21 11:15:22,377 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:22,377 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1670038194] [2022-07-21 11:15:22,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:22,377 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:22,377 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:22,378 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:22,380 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-07-21 11:15:23,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:23,433 INFO L263 TraceCheckSpWp]: Trace formula consists of 1562 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-21 11:15:23,437 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:23,595 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-21 11:15:23,595 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:23,595 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:23,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1670038194] [2022-07-21 11:15:23,595 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1670038194] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:23,595 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:23,595 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 11:15:23,595 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [303808298] [2022-07-21 11:15:23,595 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:23,596 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 11:15:23,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:23,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 11:15:23,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 11:15:23,596 INFO L87 Difference]: Start difference. First operand 5598 states and 7845 transitions. Second operand has 5 states, 5 states have (on average 19.2) internal successors, (96), 5 states have internal predecessors, (96), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-07-21 11:15:24,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:24,820 INFO L93 Difference]: Finished difference Result 8540 states and 11939 transitions. [2022-07-21 11:15:24,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 11:15:24,820 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 19.2) internal successors, (96), 5 states have internal predecessors, (96), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 142 [2022-07-21 11:15:24,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:24,830 INFO L225 Difference]: With dead ends: 8540 [2022-07-21 11:15:24,830 INFO L226 Difference]: Without dead ends: 2963 [2022-07-21 11:15:24,841 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 138 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:15:24,842 INFO L413 NwaCegarLoop]: 941 mSDtfsCounter, 24 mSDsluCounter, 2813 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 3754 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:24,842 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 3754 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-07-21 11:15:24,844 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2963 states. [2022-07-21 11:15:24,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2963 to 2875. [2022-07-21 11:15:24,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2875 states, 2147 states have (on average 1.351187703772706) internal successors, (2901), 2181 states have internal predecessors, (2901), 540 states have call successors, (540), 188 states have call predecessors, (540), 187 states have return successors, (571), 521 states have call predecessors, (571), 539 states have call successors, (571) [2022-07-21 11:15:24,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2875 states to 2875 states and 4012 transitions. [2022-07-21 11:15:24,903 INFO L78 Accepts]: Start accepts. Automaton has 2875 states and 4012 transitions. Word has length 142 [2022-07-21 11:15:24,903 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:24,903 INFO L495 AbstractCegarLoop]: Abstraction has 2875 states and 4012 transitions. [2022-07-21 11:15:24,903 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.2) internal successors, (96), 5 states have internal predecessors, (96), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-07-21 11:15:24,903 INFO L276 IsEmpty]: Start isEmpty. Operand 2875 states and 4012 transitions. [2022-07-21 11:15:24,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2022-07-21 11:15:24,908 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:24,908 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:24,939 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:25,131 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:25,132 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:25,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:25,132 INFO L85 PathProgramCache]: Analyzing trace with hash -1046565723, now seen corresponding path program 1 times [2022-07-21 11:15:25,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:25,133 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1265604803] [2022-07-21 11:15:25,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:25,133 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:25,134 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:25,135 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:25,136 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-07-21 11:15:26,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:26,461 INFO L263 TraceCheckSpWp]: Trace formula consists of 1619 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-21 11:15:26,465 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:26,699 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-07-21 11:15:26,699 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:26,699 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:26,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1265604803] [2022-07-21 11:15:26,700 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1265604803] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:26,700 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:26,700 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 11:15:26,700 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1569408635] [2022-07-21 11:15:26,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:26,700 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 11:15:26,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:26,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 11:15:26,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 11:15:26,701 INFO L87 Difference]: Start difference. First operand 2875 states and 4012 transitions. Second operand has 6 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 3 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-21 11:15:29,675 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:29,676 INFO L93 Difference]: Finished difference Result 5709 states and 7974 transitions. [2022-07-21 11:15:29,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 11:15:29,681 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 3 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 148 [2022-07-21 11:15:29,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:29,694 INFO L225 Difference]: With dead ends: 5709 [2022-07-21 11:15:29,694 INFO L226 Difference]: Without dead ends: 2880 [2022-07-21 11:15:29,702 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 148 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:15:29,704 INFO L413 NwaCegarLoop]: 945 mSDtfsCounter, 419 mSDsluCounter, 3269 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 502 SdHoareTripleChecker+Valid, 4214 SdHoareTripleChecker+Invalid, 89 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:29,704 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [502 Valid, 4214 Invalid, 89 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2022-07-21 11:15:29,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2880 states. [2022-07-21 11:15:29,770 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2880 to 2875. [2022-07-21 11:15:29,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2875 states, 2147 states have (on average 1.3502561714019563) internal successors, (2899), 2181 states have internal predecessors, (2899), 540 states have call successors, (540), 188 states have call predecessors, (540), 187 states have return successors, (571), 521 states have call predecessors, (571), 539 states have call successors, (571) [2022-07-21 11:15:29,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2875 states to 2875 states and 4010 transitions. [2022-07-21 11:15:29,781 INFO L78 Accepts]: Start accepts. Automaton has 2875 states and 4010 transitions. Word has length 148 [2022-07-21 11:15:29,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:29,782 INFO L495 AbstractCegarLoop]: Abstraction has 2875 states and 4010 transitions. [2022-07-21 11:15:29,783 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 3 states have call successors, (15), 2 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-21 11:15:29,783 INFO L276 IsEmpty]: Start isEmpty. Operand 2875 states and 4010 transitions. [2022-07-21 11:15:29,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2022-07-21 11:15:29,789 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:29,789 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:29,841 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:29,995 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:29,995 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:29,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:29,996 INFO L85 PathProgramCache]: Analyzing trace with hash 829917095, now seen corresponding path program 1 times [2022-07-21 11:15:29,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:29,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [73878189] [2022-07-21 11:15:29,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:29,997 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:29,997 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:29,998 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:30,000 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-07-21 11:15:31,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:31,326 INFO L263 TraceCheckSpWp]: Trace formula consists of 1619 conjuncts, 17 conjunts are in the unsatisfiable core [2022-07-21 11:15:31,330 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:31,857 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-07-21 11:15:31,857 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:31,857 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:31,858 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [73878189] [2022-07-21 11:15:31,858 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [73878189] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:31,858 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:31,858 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 11:15:31,858 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1208002653] [2022-07-21 11:15:31,858 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:31,858 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 11:15:31,858 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:31,858 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 11:15:31,858 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:15:31,859 INFO L87 Difference]: Start difference. First operand 2875 states and 4010 transitions. Second operand has 7 states, 7 states have (on average 14.0) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 2 states have call predecessors, (15), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-21 11:15:32,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:32,244 INFO L93 Difference]: Finished difference Result 5736 states and 8025 transitions. [2022-07-21 11:15:32,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 11:15:32,245 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 14.0) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 2 states have call predecessors, (15), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) Word has length 148 [2022-07-21 11:15:32,245 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:32,254 INFO L225 Difference]: With dead ends: 5736 [2022-07-21 11:15:32,254 INFO L226 Difference]: Without dead ends: 2907 [2022-07-21 11:15:32,260 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 142 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:15:32,260 INFO L413 NwaCegarLoop]: 938 mSDtfsCounter, 0 mSDsluCounter, 4677 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 5615 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:32,260 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 5615 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 11:15:32,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2907 states. [2022-07-21 11:15:32,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2907 to 2903. [2022-07-21 11:15:32,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2903 states, 2167 states have (on average 1.3470235348407937) internal successors, (2919), 2201 states have internal predecessors, (2919), 540 states have call successors, (540), 188 states have call predecessors, (540), 195 states have return successors, (601), 529 states have call predecessors, (601), 539 states have call successors, (601) [2022-07-21 11:15:32,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2903 states to 2903 states and 4060 transitions. [2022-07-21 11:15:32,312 INFO L78 Accepts]: Start accepts. Automaton has 2903 states and 4060 transitions. Word has length 148 [2022-07-21 11:15:32,312 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:32,312 INFO L495 AbstractCegarLoop]: Abstraction has 2903 states and 4060 transitions. [2022-07-21 11:15:32,312 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 14.0) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (15), 2 states have call predecessors, (15), 4 states have return successors, (14), 4 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-21 11:15:32,312 INFO L276 IsEmpty]: Start isEmpty. Operand 2903 states and 4060 transitions. [2022-07-21 11:15:32,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 155 [2022-07-21 11:15:32,317 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:32,318 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:32,350 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:32,544 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:32,544 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:32,544 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:32,544 INFO L85 PathProgramCache]: Analyzing trace with hash 198615179, now seen corresponding path program 1 times [2022-07-21 11:15:32,545 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:32,545 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1818410939] [2022-07-21 11:15:32,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:32,545 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:32,546 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:32,547 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:32,548 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-07-21 11:15:33,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:33,796 INFO L263 TraceCheckSpWp]: Trace formula consists of 1636 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-21 11:15:33,799 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:34,070 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2022-07-21 11:15:34,070 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:34,071 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:34,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1818410939] [2022-07-21 11:15:34,071 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1818410939] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:34,071 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:34,071 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 11:15:34,071 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1796479837] [2022-07-21 11:15:34,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:34,071 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 11:15:34,071 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:34,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 11:15:34,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 11:15:34,072 INFO L87 Difference]: Start difference. First operand 2903 states and 4060 transitions. Second operand has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) [2022-07-21 11:15:34,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:34,234 INFO L93 Difference]: Finished difference Result 5802 states and 8215 transitions. [2022-07-21 11:15:34,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 11:15:34,235 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) Word has length 154 [2022-07-21 11:15:34,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:34,256 INFO L225 Difference]: With dead ends: 5802 [2022-07-21 11:15:34,256 INFO L226 Difference]: Without dead ends: 2945 [2022-07-21 11:15:34,263 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 150 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 11:15:34,263 INFO L413 NwaCegarLoop]: 937 mSDtfsCounter, 2 mSDsluCounter, 2799 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 3736 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:34,264 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 3736 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 11:15:34,266 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2945 states. [2022-07-21 11:15:34,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2945 to 2933. [2022-07-21 11:15:34,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2933 states, 2188 states have (on average 1.3436928702010968) internal successors, (2940), 2225 states have internal predecessors, (2940), 540 states have call successors, (540), 188 states have call predecessors, (540), 204 states have return successors, (614), 535 states have call predecessors, (614), 539 states have call successors, (614) [2022-07-21 11:15:34,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2933 states to 2933 states and 4094 transitions. [2022-07-21 11:15:34,317 INFO L78 Accepts]: Start accepts. Automaton has 2933 states and 4094 transitions. Word has length 154 [2022-07-21 11:15:34,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:34,317 INFO L495 AbstractCegarLoop]: Abstraction has 2933 states and 4094 transitions. [2022-07-21 11:15:34,317 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.2) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 1 states have call successors, (15) [2022-07-21 11:15:34,318 INFO L276 IsEmpty]: Start isEmpty. Operand 2933 states and 4094 transitions. [2022-07-21 11:15:34,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2022-07-21 11:15:34,323 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:34,323 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:34,369 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:34,551 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:34,552 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:34,552 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:34,552 INFO L85 PathProgramCache]: Analyzing trace with hash -1478023259, now seen corresponding path program 1 times [2022-07-21 11:15:34,553 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:34,553 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [368637648] [2022-07-21 11:15:34,553 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:34,553 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:34,553 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:34,555 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:34,556 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-07-21 11:15:35,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:35,972 INFO L263 TraceCheckSpWp]: Trace formula consists of 1662 conjuncts, 30 conjunts are in the unsatisfiable core [2022-07-21 11:15:35,976 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:37,389 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 88 trivial. 0 not checked. [2022-07-21 11:15:37,390 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:37,390 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:37,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [368637648] [2022-07-21 11:15:37,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [368637648] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:37,390 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:37,390 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-07-21 11:15:37,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424700731] [2022-07-21 11:15:37,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:37,391 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-07-21 11:15:37,391 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:37,391 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-07-21 11:15:37,392 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2022-07-21 11:15:37,392 INFO L87 Difference]: Start difference. First operand 2933 states and 4094 transitions. Second operand has 13 states, 13 states have (on average 8.153846153846153) internal successors, (106), 9 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 1 states have call successors, (16) [2022-07-21 11:15:39,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:39,005 INFO L93 Difference]: Finished difference Result 5858 states and 8257 transitions. [2022-07-21 11:15:39,006 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-21 11:15:39,007 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 8.153846153846153) internal successors, (106), 9 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 1 states have call successors, (16) Word has length 161 [2022-07-21 11:15:39,007 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:39,017 INFO L225 Difference]: With dead ends: 5858 [2022-07-21 11:15:39,018 INFO L226 Difference]: Without dead ends: 2971 [2022-07-21 11:15:39,027 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 150 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2022-07-21 11:15:39,027 INFO L413 NwaCegarLoop]: 945 mSDtfsCounter, 11 mSDsluCounter, 10343 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 11288 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:39,027 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 11288 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-07-21 11:15:39,030 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2971 states. [2022-07-21 11:15:39,088 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2971 to 2960. [2022-07-21 11:15:39,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2960 states, 2208 states have (on average 1.3378623188405796) internal successors, (2954), 2243 states have internal predecessors, (2954), 540 states have call successors, (540), 188 states have call predecessors, (540), 211 states have return successors, (628), 544 states have call predecessors, (628), 539 states have call successors, (628) [2022-07-21 11:15:39,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2960 states to 2960 states and 4122 transitions. [2022-07-21 11:15:39,098 INFO L78 Accepts]: Start accepts. Automaton has 2960 states and 4122 transitions. Word has length 161 [2022-07-21 11:15:39,099 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:39,099 INFO L495 AbstractCegarLoop]: Abstraction has 2960 states and 4122 transitions. [2022-07-21 11:15:39,099 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 8.153846153846153) internal successors, (106), 9 states have internal predecessors, (106), 2 states have call successors, (17), 2 states have call predecessors, (17), 5 states have return successors, (16), 5 states have call predecessors, (16), 1 states have call successors, (16) [2022-07-21 11:15:39,099 INFO L276 IsEmpty]: Start isEmpty. Operand 2960 states and 4122 transitions. [2022-07-21 11:15:39,107 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 171 [2022-07-21 11:15:39,107 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:39,108 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 4, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:39,155 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:39,320 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:39,321 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:39,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:39,321 INFO L85 PathProgramCache]: Analyzing trace with hash 561002325, now seen corresponding path program 1 times [2022-07-21 11:15:39,322 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:39,322 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [328690363] [2022-07-21 11:15:39,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:39,322 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:39,322 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:39,324 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:39,325 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2022-07-21 11:15:40,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:40,738 INFO L263 TraceCheckSpWp]: Trace formula consists of 1678 conjuncts, 33 conjunts are in the unsatisfiable core [2022-07-21 11:15:40,743 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:42,272 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2022-07-21 11:15:42,272 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:42,272 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:42,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [328690363] [2022-07-21 11:15:42,272 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [328690363] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:42,272 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:42,273 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-07-21 11:15:42,273 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1615166229] [2022-07-21 11:15:42,273 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:42,273 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-07-21 11:15:42,273 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:42,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-07-21 11:15:42,273 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2022-07-21 11:15:42,274 INFO L87 Difference]: Start difference. First operand 2960 states and 4122 transitions. Second operand has 12 states, 12 states have (on average 9.083333333333334) internal successors, (109), 9 states have internal predecessors, (109), 3 states have call successors, (20), 2 states have call predecessors, (20), 5 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2022-07-21 11:15:43,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:43,413 INFO L93 Difference]: Finished difference Result 5897 states and 8287 transitions. [2022-07-21 11:15:43,413 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-21 11:15:43,414 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 9.083333333333334) internal successors, (109), 9 states have internal predecessors, (109), 3 states have call successors, (20), 2 states have call predecessors, (20), 5 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) Word has length 170 [2022-07-21 11:15:43,414 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:43,422 INFO L225 Difference]: With dead ends: 5897 [2022-07-21 11:15:43,423 INFO L226 Difference]: Without dead ends: 2983 [2022-07-21 11:15:43,430 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 160 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2022-07-21 11:15:43,431 INFO L413 NwaCegarLoop]: 945 mSDtfsCounter, 12 mSDsluCounter, 9400 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 10345 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:43,431 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 10345 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-07-21 11:15:43,434 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2983 states. [2022-07-21 11:15:43,484 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2983 to 2977. [2022-07-21 11:15:43,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2977 states, 2223 states have (on average 1.335582546108862) internal successors, (2969), 2253 states have internal predecessors, (2969), 540 states have call successors, (540), 188 states have call predecessors, (540), 213 states have return successors, (631), 551 states have call predecessors, (631), 539 states have call successors, (631) [2022-07-21 11:15:43,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2977 states to 2977 states and 4140 transitions. [2022-07-21 11:15:43,495 INFO L78 Accepts]: Start accepts. Automaton has 2977 states and 4140 transitions. Word has length 170 [2022-07-21 11:15:43,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:43,496 INFO L495 AbstractCegarLoop]: Abstraction has 2977 states and 4140 transitions. [2022-07-21 11:15:43,496 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 9.083333333333334) internal successors, (109), 9 states have internal predecessors, (109), 3 states have call successors, (20), 2 states have call predecessors, (20), 5 states have return successors, (19), 6 states have call predecessors, (19), 2 states have call successors, (19) [2022-07-21 11:15:43,496 INFO L276 IsEmpty]: Start isEmpty. Operand 2977 states and 4140 transitions. [2022-07-21 11:15:43,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-07-21 11:15:43,502 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:43,502 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:43,547 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:43,715 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:43,715 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:43,716 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:43,716 INFO L85 PathProgramCache]: Analyzing trace with hash -1188259002, now seen corresponding path program 1 times [2022-07-21 11:15:43,717 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:43,717 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [234703979] [2022-07-21 11:15:43,717 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:43,717 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:43,717 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:43,719 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:43,720 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2022-07-21 11:15:45,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:15:45,119 INFO L263 TraceCheckSpWp]: Trace formula consists of 1665 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-21 11:15:45,122 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:15:45,644 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 80 proven. 0 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2022-07-21 11:15:45,644 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:15:45,644 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:15:45,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [234703979] [2022-07-21 11:15:45,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [234703979] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:15:45,644 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:15:45,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 11:15:45,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [190163086] [2022-07-21 11:15:45,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:15:45,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 11:15:45,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:15:45,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 11:15:45,645 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 11:15:45,645 INFO L87 Difference]: Start difference. First operand 2977 states and 4140 transitions. Second operand has 3 states, 3 states have (on average 39.333333333333336) internal successors, (118), 3 states have internal predecessors, (118), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-07-21 11:15:45,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:15:45,995 INFO L93 Difference]: Finished difference Result 6765 states and 9405 transitions. [2022-07-21 11:15:46,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 11:15:46,008 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 39.333333333333336) internal successors, (118), 3 states have internal predecessors, (118), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 172 [2022-07-21 11:15:46,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:15:46,022 INFO L225 Difference]: With dead ends: 6765 [2022-07-21 11:15:46,023 INFO L226 Difference]: Without dead ends: 3834 [2022-07-21 11:15:46,030 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 170 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 11:15:46,031 INFO L413 NwaCegarLoop]: 1126 mSDtfsCounter, 650 mSDsluCounter, 725 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 650 SdHoareTripleChecker+Valid, 1851 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 11:15:46,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [650 Valid, 1851 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 11:15:46,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3834 states. [2022-07-21 11:15:46,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3834 to 3803. [2022-07-21 11:15:46,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3803 states, 2863 states have (on average 1.3370590289905693) internal successors, (3828), 2899 states have internal predecessors, (3828), 656 states have call successors, (656), 248 states have call predecessors, (656), 283 states have return successors, (777), 673 states have call predecessors, (777), 655 states have call successors, (777) [2022-07-21 11:15:46,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3803 states to 3803 states and 5261 transitions. [2022-07-21 11:15:46,179 INFO L78 Accepts]: Start accepts. Automaton has 3803 states and 5261 transitions. Word has length 172 [2022-07-21 11:15:46,179 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:15:46,179 INFO L495 AbstractCegarLoop]: Abstraction has 3803 states and 5261 transitions. [2022-07-21 11:15:46,179 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 39.333333333333336) internal successors, (118), 3 states have internal predecessors, (118), 3 states have call successors, (19), 3 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-07-21 11:15:46,179 INFO L276 IsEmpty]: Start isEmpty. Operand 3803 states and 5261 transitions. [2022-07-21 11:15:46,185 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2022-07-21 11:15:46,186 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:15:46,186 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:15:46,241 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2022-07-21 11:15:46,407 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:15:46,407 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:15:46,408 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:15:46,408 INFO L85 PathProgramCache]: Analyzing trace with hash -1401601602, now seen corresponding path program 1 times [2022-07-21 11:15:46,409 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:15:46,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [551576219] [2022-07-21 11:15:46,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:15:46,410 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:15:46,410 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:15:46,420 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:15:46,466 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process