./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 12:36:35,649 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 12:36:35,651 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 12:36:35,692 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 12:36:35,693 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 12:36:35,694 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 12:36:35,696 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 12:36:35,698 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 12:36:35,700 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 12:36:35,704 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 12:36:35,705 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 12:36:35,707 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 12:36:35,707 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 12:36:35,709 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 12:36:35,709 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 12:36:35,712 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 12:36:35,713 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 12:36:35,714 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 12:36:35,716 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 12:36:35,721 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 12:36:35,723 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 12:36:35,724 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 12:36:35,725 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 12:36:35,725 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 12:36:35,727 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 12:36:35,733 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 12:36:35,733 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 12:36:35,734 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 12:36:35,735 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 12:36:35,735 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 12:36:35,736 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 12:36:35,736 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 12:36:35,738 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 12:36:35,738 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 12:36:35,739 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 12:36:35,740 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 12:36:35,741 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 12:36:35,741 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 12:36:35,741 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 12:36:35,742 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 12:36:35,743 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 12:36:35,744 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 12:36:35,745 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-07-12 12:36:35,774 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 12:36:35,775 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 12:36:35,775 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 12:36:35,775 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 12:36:35,776 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 12:36:35,777 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 12:36:35,777 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 12:36:35,777 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 12:36:35,778 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 12:36:35,778 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 12:36:35,778 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 12:36:35,779 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 12:36:35,779 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 12:36:35,779 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 12:36:35,779 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 12:36:35,779 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 12:36:35,780 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 12:36:35,780 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 12:36:35,780 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 12:36:35,780 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 12:36:35,780 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 12:36:35,781 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 12:36:35,781 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 12:36:35,781 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 12:36:35,781 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 12:36:35,781 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 12:36:35,782 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 12:36:35,782 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 12:36:35,782 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 12:36:35,782 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 12:36:35,782 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b [2022-07-12 12:36:36,011 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 12:36:36,041 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 12:36:36,044 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 12:36:36,045 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 12:36:36,046 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 12:36:36,047 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-12 12:36:36,118 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3c4dbca8a/4bd08fb4e033473f9ba03439920a704f/FLAG7ac72cc6a [2022-07-12 12:36:36,744 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 12:36:36,745 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-12 12:36:36,787 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3c4dbca8a/4bd08fb4e033473f9ba03439920a704f/FLAG7ac72cc6a [2022-07-12 12:36:36,923 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3c4dbca8a/4bd08fb4e033473f9ba03439920a704f [2022-07-12 12:36:36,925 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 12:36:36,927 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 12:36:36,931 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 12:36:36,931 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 12:36:36,934 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 12:36:36,935 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 12:36:36" (1/1) ... [2022-07-12 12:36:36,936 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5841f83 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:36, skipping insertion in model container [2022-07-12 12:36:36,936 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 12:36:36" (1/1) ... [2022-07-12 12:36:36,942 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 12:36:37,029 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 12:36:37,566 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-12 12:36:37,773 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 12:36:37,793 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 12:36:37,979 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-12 12:36:38,011 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 12:36:38,044 INFO L208 MainTranslator]: Completed translation [2022-07-12 12:36:38,045 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38 WrapperNode [2022-07-12 12:36:38,045 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 12:36:38,047 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 12:36:38,047 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 12:36:38,047 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 12:36:38,053 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,093 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,192 INFO L137 Inliner]: procedures = 101, calls = 368, calls flagged for inlining = 41, calls inlined = 38, statements flattened = 961 [2022-07-12 12:36:38,193 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 12:36:38,194 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 12:36:38,194 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 12:36:38,194 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 12:36:38,202 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,203 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,222 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,223 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,261 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,273 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,279 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,298 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 12:36:38,302 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 12:36:38,302 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 12:36:38,302 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 12:36:38,304 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (1/1) ... [2022-07-12 12:36:38,310 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 12:36:38,318 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 12:36:38,332 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 12:36:38,339 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 12:36:38,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-07-12 12:36:38,364 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-07-12 12:36:38,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-07-12 12:36:38,364 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-12 12:36:38,364 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-12 12:36:38,364 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-07-12 12:36:38,364 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_disconnect [2022-07-12 12:36:38,364 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_disconnect [2022-07-12 12:36:38,364 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-07-12 12:36:38,365 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-07-12 12:36:38,365 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-12 12:36:38,365 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-12 12:36:38,365 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-07-12 12:36:38,365 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-07-12 12:36:38,365 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-07-12 12:36:38,366 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-12 12:36:38,366 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-12 12:36:38,366 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-07-12 12:36:38,366 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-07-12 12:36:38,366 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-12 12:36:38,366 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-12 12:36:38,366 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-12 12:36:38,366 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-12 12:36:38,367 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-12 12:36:38,367 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-12 12:36:38,367 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-12 12:36:38,367 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 12:36:38,367 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-12 12:36:38,367 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-12 12:36:38,367 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-12 12:36:38,368 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_tx_fixup [2022-07-12 12:36:38,368 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_tx_fixup [2022-07-12 12:36:38,368 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_rx_fixup [2022-07-12 12:36:38,368 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_rx_fixup [2022-07-12 12:36:38,368 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-12 12:36:38,368 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-12 12:36:38,368 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-07-12 12:36:38,368 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-07-12 12:36:38,368 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 12:36:38,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-07-12 12:36:38,369 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-12 12:36:38,369 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-12 12:36:38,369 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 12:36:38,369 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 12:36:38,664 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 12:36:38,666 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 12:36:38,805 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-12 12:36:40,197 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 12:36:40,208 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 12:36:40,209 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-12 12:36:40,212 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 12:36:40 BoogieIcfgContainer [2022-07-12 12:36:40,212 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 12:36:40,214 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 12:36:40,214 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 12:36:40,217 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 12:36:40,217 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 12:36:36" (1/3) ... [2022-07-12 12:36:40,219 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3dbbf884 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 12:36:40, skipping insertion in model container [2022-07-12 12:36:40,219 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:36:38" (2/3) ... [2022-07-12 12:36:40,220 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3dbbf884 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 12:36:40, skipping insertion in model container [2022-07-12 12:36:40,220 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 12:36:40" (3/3) ... [2022-07-12 12:36:40,222 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-12 12:36:40,237 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 12:36:40,237 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 12:36:40,308 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 12:36:40,315 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@107b0caf, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@32f9210b [2022-07-12 12:36:40,316 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 12:36:40,324 INFO L276 IsEmpty]: Start isEmpty. Operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) [2022-07-12 12:36:40,338 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-07-12 12:36:40,338 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:36:40,339 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:36:40,340 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:36:40,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:36:40,345 INFO L85 PathProgramCache]: Analyzing trace with hash 721078938, now seen corresponding path program 1 times [2022-07-12 12:36:40,353 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:36:40,354 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [451506800] [2022-07-12 12:36:40,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:36:40,355 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:36:40,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:40,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 12:36:40,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:40,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 12:36:40,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:40,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 12:36:40,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:40,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 12:36:40,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:40,843 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-12 12:36:40,844 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 12:36:40,844 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [451506800] [2022-07-12 12:36:40,845 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [451506800] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:36:40,845 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:36:40,845 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 12:36:40,847 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [272907145] [2022-07-12 12:36:40,848 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:36:40,852 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 12:36:40,852 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 12:36:40,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 12:36:40,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 12:36:40,897 INFO L87 Difference]: Start difference. First operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-12 12:36:43,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:36:43,237 INFO L93 Difference]: Finished difference Result 786 states and 1178 transitions. [2022-07-12 12:36:43,238 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 12:36:43,240 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 42 [2022-07-12 12:36:43,240 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:36:43,265 INFO L225 Difference]: With dead ends: 786 [2022-07-12 12:36:43,265 INFO L226 Difference]: Without dead ends: 536 [2022-07-12 12:36:43,272 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-12 12:36:43,275 INFO L413 NwaCegarLoop]: 344 mSDtfsCounter, 580 mSDsluCounter, 623 mSDsCounter, 0 mSdLazyCounter, 368 mSolverCounterSat, 221 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 606 SdHoareTripleChecker+Valid, 967 SdHoareTripleChecker+Invalid, 589 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 221 IncrementalHoareTripleChecker+Valid, 368 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-07-12 12:36:43,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [606 Valid, 967 Invalid, 589 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [221 Valid, 368 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-07-12 12:36:43,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 536 states. [2022-07-12 12:36:43,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 536 to 419. [2022-07-12 12:36:43,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 419 states, 339 states have (on average 1.3746312684365782) internal successors, (466), 339 states have internal predecessors, (466), 56 states have call successors, (56), 24 states have call predecessors, (56), 23 states have return successors, (55), 55 states have call predecessors, (55), 55 states have call successors, (55) [2022-07-12 12:36:43,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 419 states to 419 states and 577 transitions. [2022-07-12 12:36:43,355 INFO L78 Accepts]: Start accepts. Automaton has 419 states and 577 transitions. Word has length 42 [2022-07-12 12:36:43,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:36:43,356 INFO L495 AbstractCegarLoop]: Abstraction has 419 states and 577 transitions. [2022-07-12 12:36:43,356 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-12 12:36:43,356 INFO L276 IsEmpty]: Start isEmpty. Operand 419 states and 577 transitions. [2022-07-12 12:36:43,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-12 12:36:43,360 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:36:43,360 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:36:43,360 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 12:36:43,361 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:36:43,361 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:36:43,361 INFO L85 PathProgramCache]: Analyzing trace with hash -36377006, now seen corresponding path program 1 times [2022-07-12 12:36:43,361 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:36:43,362 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1152968788] [2022-07-12 12:36:43,362 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:36:43,362 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:36:43,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:43,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 12:36:43,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:43,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 12:36:43,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:43,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 12:36:43,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:43,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 12:36:43,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:43,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-12 12:36:43,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:43,639 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-12 12:36:43,639 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 12:36:43,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1152968788] [2022-07-12 12:36:43,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1152968788] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:36:43,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:36:43,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 12:36:43,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [942596779] [2022-07-12 12:36:43,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:36:43,642 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 12:36:43,642 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 12:36:43,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 12:36:43,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 12:36:43,643 INFO L87 Difference]: Start difference. First operand 419 states and 577 transitions. Second operand has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 5 states have internal predecessors, (32), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 12:36:46,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:36:46,404 INFO L93 Difference]: Finished difference Result 1453 states and 2078 transitions. [2022-07-12 12:36:46,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-12 12:36:46,404 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 5 states have internal predecessors, (32), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 52 [2022-07-12 12:36:46,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:36:46,411 INFO L225 Difference]: With dead ends: 1453 [2022-07-12 12:36:46,412 INFO L226 Difference]: Without dead ends: 1044 [2022-07-12 12:36:46,414 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-07-12 12:36:46,415 INFO L413 NwaCegarLoop]: 333 mSDtfsCounter, 606 mSDsluCounter, 1188 mSDsCounter, 0 mSdLazyCounter, 602 mSolverCounterSat, 198 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 632 SdHoareTripleChecker+Valid, 1521 SdHoareTripleChecker+Invalid, 800 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 198 IncrementalHoareTripleChecker+Valid, 602 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-07-12 12:36:46,415 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [632 Valid, 1521 Invalid, 800 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [198 Valid, 602 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2022-07-12 12:36:46,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1044 states. [2022-07-12 12:36:46,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1044 to 871. [2022-07-12 12:36:46,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 871 states, 706 states have (on average 1.3767705382436262) internal successors, (972), 710 states have internal predecessors, (972), 113 states have call successors, (113), 46 states have call predecessors, (113), 51 states have return successors, (131), 114 states have call predecessors, (131), 112 states have call successors, (131) [2022-07-12 12:36:46,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 871 states to 871 states and 1216 transitions. [2022-07-12 12:36:46,495 INFO L78 Accepts]: Start accepts. Automaton has 871 states and 1216 transitions. Word has length 52 [2022-07-12 12:36:46,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:36:46,496 INFO L495 AbstractCegarLoop]: Abstraction has 871 states and 1216 transitions. [2022-07-12 12:36:46,496 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 5 states have internal predecessors, (32), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 12:36:46,496 INFO L276 IsEmpty]: Start isEmpty. Operand 871 states and 1216 transitions. [2022-07-12 12:36:46,504 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 127 [2022-07-12 12:36:46,504 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:36:46,505 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:36:46,505 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-12 12:36:46,506 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:36:46,506 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:36:46,506 INFO L85 PathProgramCache]: Analyzing trace with hash 1655869192, now seen corresponding path program 1 times [2022-07-12 12:36:46,506 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:36:46,507 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1952486562] [2022-07-12 12:36:46,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:36:46,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:36:46,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 12:36:46,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 12:36:46,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 12:36:46,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 12:36:46,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-12 12:36:46,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:36:46,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:46,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-12 12:36:46,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:46,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-12 12:36:46,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:46,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-12 12:36:46,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:46,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-07-12 12:36:46,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:46,926 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 8 proven. 2 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-07-12 12:36:46,927 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 12:36:46,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1952486562] [2022-07-12 12:36:46,927 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1952486562] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 12:36:46,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [219984338] [2022-07-12 12:36:46,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:36:46,928 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 12:36:46,929 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 12:36:46,931 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 12:36:46,951 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-12 12:36:47,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:47,290 INFO L263 TraceCheckSpWp]: Trace formula consists of 1311 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-12 12:36:47,303 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:36:47,352 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-07-12 12:36:47,353 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:36:47,353 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [219984338] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:36:47,353 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 12:36:47,354 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 11 [2022-07-12 12:36:47,354 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [945611375] [2022-07-12 12:36:47,354 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:36:47,355 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 12:36:47,355 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 12:36:47,355 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 12:36:47,356 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-07-12 12:36:47,356 INFO L87 Difference]: Start difference. First operand 871 states and 1216 transitions. Second operand has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-12 12:36:47,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:36:47,485 INFO L93 Difference]: Finished difference Result 2006 states and 2833 transitions. [2022-07-12 12:36:47,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 12:36:47,486 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 126 [2022-07-12 12:36:47,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:36:47,493 INFO L225 Difference]: With dead ends: 2006 [2022-07-12 12:36:47,493 INFO L226 Difference]: Without dead ends: 1151 [2022-07-12 12:36:47,497 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 161 GetRequests, 152 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-07-12 12:36:47,502 INFO L413 NwaCegarLoop]: 320 mSDtfsCounter, 125 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 591 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 12:36:47,503 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 591 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 12:36:47,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1151 states. [2022-07-12 12:36:47,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1151 to 1140. [2022-07-12 12:36:47,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1140 states, 952 states have (on average 1.4002100840336134) internal successors, (1333), 956 states have internal predecessors, (1333), 126 states have call successors, (126), 56 states have call predecessors, (126), 61 states have return successors, (144), 127 states have call predecessors, (144), 125 states have call successors, (144) [2022-07-12 12:36:47,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1140 states to 1140 states and 1603 transitions. [2022-07-12 12:36:47,574 INFO L78 Accepts]: Start accepts. Automaton has 1140 states and 1603 transitions. Word has length 126 [2022-07-12 12:36:47,576 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:36:47,576 INFO L495 AbstractCegarLoop]: Abstraction has 1140 states and 1603 transitions. [2022-07-12 12:36:47,576 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-12 12:36:47,577 INFO L276 IsEmpty]: Start isEmpty. Operand 1140 states and 1603 transitions. [2022-07-12 12:36:47,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2022-07-12 12:36:47,592 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:36:47,592 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:36:47,626 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-12 12:36:47,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 12:36:47,808 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:36:47,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:36:47,808 INFO L85 PathProgramCache]: Analyzing trace with hash -474001616, now seen corresponding path program 1 times [2022-07-12 12:36:47,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:36:47,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1336004189] [2022-07-12 12:36:47,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:36:47,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:36:47,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:47,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 12:36:47,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:47,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 12:36:47,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:47,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 12:36:47,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:47,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 12:36:47,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:47,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-12 12:36:47,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:47,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-12 12:36:47,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:47,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 12:36:47,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:47,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-12 12:36:48,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:48,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:36:48,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:48,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:48,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:48,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-12 12:36:48,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:48,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:48,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:48,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-12 12:36:48,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:48,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:48,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:48,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-12 12:36:48,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:48,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:48,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:48,080 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2022-07-12 12:36:48,081 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 12:36:48,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1336004189] [2022-07-12 12:36:48,081 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1336004189] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:36:48,081 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:36:48,082 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 12:36:48,082 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200383792] [2022-07-12 12:36:48,082 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:36:48,084 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 12:36:48,084 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 12:36:48,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 12:36:48,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-12 12:36:48,086 INFO L87 Difference]: Start difference. First operand 1140 states and 1603 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (15), 5 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 12:36:51,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:36:51,243 INFO L93 Difference]: Finished difference Result 3449 states and 4896 transitions. [2022-07-12 12:36:51,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-12 12:36:51,244 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (15), 5 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 148 [2022-07-12 12:36:51,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:36:51,254 INFO L225 Difference]: With dead ends: 3449 [2022-07-12 12:36:51,254 INFO L226 Difference]: Without dead ends: 2336 [2022-07-12 12:36:51,257 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-12 12:36:51,258 INFO L413 NwaCegarLoop]: 444 mSDtfsCounter, 664 mSDsluCounter, 1058 mSDsCounter, 0 mSdLazyCounter, 545 mSolverCounterSat, 271 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 694 SdHoareTripleChecker+Valid, 1502 SdHoareTripleChecker+Invalid, 816 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 271 IncrementalHoareTripleChecker+Valid, 545 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-07-12 12:36:51,258 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [694 Valid, 1502 Invalid, 816 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [271 Valid, 545 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-07-12 12:36:51,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2336 states. [2022-07-12 12:36:51,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2336 to 1902. [2022-07-12 12:36:51,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1902 states, 1588 states have (on average 1.3860201511335013) internal successors, (2201), 1596 states have internal predecessors, (2201), 206 states have call successors, (206), 96 states have call predecessors, (206), 107 states have return successors, (233), 209 states have call predecessors, (233), 205 states have call successors, (233) [2022-07-12 12:36:51,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1902 states to 1902 states and 2640 transitions. [2022-07-12 12:36:51,337 INFO L78 Accepts]: Start accepts. Automaton has 1902 states and 2640 transitions. Word has length 148 [2022-07-12 12:36:51,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:36:51,338 INFO L495 AbstractCegarLoop]: Abstraction has 1902 states and 2640 transitions. [2022-07-12 12:36:51,338 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 3 states have internal predecessors, (85), 3 states have call successors, (15), 5 states have call predecessors, (15), 1 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 12:36:51,338 INFO L276 IsEmpty]: Start isEmpty. Operand 1902 states and 2640 transitions. [2022-07-12 12:36:51,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 149 [2022-07-12 12:36:51,342 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:36:51,342 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:36:51,342 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 12:36:51,342 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:36:51,343 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:36:51,343 INFO L85 PathProgramCache]: Analyzing trace with hash -676998162, now seen corresponding path program 1 times [2022-07-12 12:36:51,343 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:36:51,343 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1129062547] [2022-07-12 12:36:51,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:36:51,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:36:51,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 12:36:51,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 12:36:51,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 12:36:51,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 12:36:51,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-12 12:36:51,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-12 12:36:51,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 12:36:51,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-12 12:36:51,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:36:51,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:51,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-12 12:36:51,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:51,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-12 12:36:51,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:51,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-12 12:36:51,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:51,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:51,636 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2022-07-12 12:36:51,636 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 12:36:51,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1129062547] [2022-07-12 12:36:51,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1129062547] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:36:51,637 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:36:51,637 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-07-12 12:36:51,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [427001337] [2022-07-12 12:36:51,637 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:36:51,638 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-12 12:36:51,638 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 12:36:51,638 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-12 12:36:51,638 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-07-12 12:36:51,639 INFO L87 Difference]: Start difference. First operand 1902 states and 2640 transitions. Second operand has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-12 12:36:54,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:36:54,864 INFO L93 Difference]: Finished difference Result 4158 states and 5877 transitions. [2022-07-12 12:36:54,868 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-12 12:36:54,869 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) Word has length 148 [2022-07-12 12:36:54,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:36:54,881 INFO L225 Difference]: With dead ends: 4158 [2022-07-12 12:36:54,882 INFO L226 Difference]: Without dead ends: 2283 [2022-07-12 12:36:54,888 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-12 12:36:54,890 INFO L413 NwaCegarLoop]: 305 mSDtfsCounter, 110 mSDsluCounter, 1384 mSDsCounter, 0 mSdLazyCounter, 729 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 1689 SdHoareTripleChecker+Invalid, 789 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 729 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-07-12 12:36:54,893 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [121 Valid, 1689 Invalid, 789 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 729 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-07-12 12:36:54,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2283 states. [2022-07-12 12:36:54,962 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2283 to 1902. [2022-07-12 12:36:54,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1902 states, 1580 states have (on average 1.3778481012658228) internal successors, (2177), 1592 states have internal predecessors, (2177), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (249), 213 states have call predecessors, (249), 205 states have call successors, (249) [2022-07-12 12:36:54,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1902 states to 1902 states and 2632 transitions. [2022-07-12 12:36:54,974 INFO L78 Accepts]: Start accepts. Automaton has 1902 states and 2632 transitions. Word has length 148 [2022-07-12 12:36:54,975 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:36:54,975 INFO L495 AbstractCegarLoop]: Abstraction has 1902 states and 2632 transitions. [2022-07-12 12:36:54,976 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.444444444444445) internal successors, (85), 4 states have internal predecessors, (85), 2 states have call successors, (15), 5 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 2 states have call successors, (14) [2022-07-12 12:36:54,976 INFO L276 IsEmpty]: Start isEmpty. Operand 1902 states and 2632 transitions. [2022-07-12 12:36:54,979 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 156 [2022-07-12 12:36:54,979 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:36:54,979 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:36:54,980 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-12 12:36:54,980 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:36:54,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:36:54,980 INFO L85 PathProgramCache]: Analyzing trace with hash -293871194, now seen corresponding path program 1 times [2022-07-12 12:36:54,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:36:54,981 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1842197194] [2022-07-12 12:36:54,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:36:54,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:36:55,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 12:36:55,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 12:36:55,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 12:36:55,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 12:36:55,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-12 12:36:55,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-12 12:36:55,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 12:36:55,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-12 12:36:55,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:36:55,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:55,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-12 12:36:55,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:55,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:36:55,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-12 12:36:55,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:55,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-07-12 12:36:55,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:55,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:55,475 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2022-07-12 12:36:55,476 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 12:36:55,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1842197194] [2022-07-12 12:36:55,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1842197194] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:36:55,476 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:36:55,477 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2022-07-12 12:36:55,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [687726077] [2022-07-12 12:36:55,477 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:36:55,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-07-12 12:36:55,478 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 12:36:55,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-07-12 12:36:55,478 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2022-07-12 12:36:55,479 INFO L87 Difference]: Start difference. First operand 1902 states and 2632 transitions. Second operand has 14 states, 14 states have (on average 6.428571428571429) internal successors, (90), 8 states have internal predecessors, (90), 3 states have call successors, (16), 6 states have call predecessors, (16), 4 states have return successors, (15), 5 states have call predecessors, (15), 3 states have call successors, (15) [2022-07-12 12:36:58,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:36:58,986 INFO L93 Difference]: Finished difference Result 4398 states and 6221 transitions. [2022-07-12 12:36:58,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-12 12:36:58,987 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 6.428571428571429) internal successors, (90), 8 states have internal predecessors, (90), 3 states have call successors, (16), 6 states have call predecessors, (16), 4 states have return successors, (15), 5 states have call predecessors, (15), 3 states have call successors, (15) Word has length 155 [2022-07-12 12:36:58,988 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:36:59,004 INFO L225 Difference]: With dead ends: 4398 [2022-07-12 12:36:59,004 INFO L226 Difference]: Without dead ends: 2523 [2022-07-12 12:36:59,011 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=43, Invalid=229, Unknown=0, NotChecked=0, Total=272 [2022-07-12 12:36:59,014 INFO L413 NwaCegarLoop]: 354 mSDtfsCounter, 262 mSDsluCounter, 2525 mSDsCounter, 0 mSdLazyCounter, 1301 mSolverCounterSat, 139 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 280 SdHoareTripleChecker+Valid, 2879 SdHoareTripleChecker+Invalid, 1440 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 139 IncrementalHoareTripleChecker+Valid, 1301 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.3s IncrementalHoareTripleChecker+Time [2022-07-12 12:36:59,014 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [280 Valid, 2879 Invalid, 1440 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [139 Valid, 1301 Invalid, 0 Unknown, 0 Unchecked, 3.3s Time] [2022-07-12 12:36:59,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2523 states. [2022-07-12 12:36:59,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2523 to 1918. [2022-07-12 12:36:59,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1918 states, 1596 states have (on average 1.369047619047619) internal successors, (2185), 1600 states have internal predecessors, (2185), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (245), 221 states have call predecessors, (245), 205 states have call successors, (245) [2022-07-12 12:36:59,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1918 states to 1918 states and 2636 transitions. [2022-07-12 12:36:59,117 INFO L78 Accepts]: Start accepts. Automaton has 1918 states and 2636 transitions. Word has length 155 [2022-07-12 12:36:59,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:36:59,118 INFO L495 AbstractCegarLoop]: Abstraction has 1918 states and 2636 transitions. [2022-07-12 12:36:59,118 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 6.428571428571429) internal successors, (90), 8 states have internal predecessors, (90), 3 states have call successors, (16), 6 states have call predecessors, (16), 4 states have return successors, (15), 5 states have call predecessors, (15), 3 states have call successors, (15) [2022-07-12 12:36:59,119 INFO L276 IsEmpty]: Start isEmpty. Operand 1918 states and 2636 transitions. [2022-07-12 12:36:59,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 162 [2022-07-12 12:36:59,122 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:36:59,123 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:36:59,123 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-12 12:36:59,123 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:36:59,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:36:59,124 INFO L85 PathProgramCache]: Analyzing trace with hash -1223252563, now seen corresponding path program 1 times [2022-07-12 12:36:59,124 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:36:59,124 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238313674] [2022-07-12 12:36:59,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:36:59,125 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:36:59,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 12:36:59,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 12:36:59,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 12:36:59,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 12:36:59,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-12 12:36:59,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-12 12:36:59,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 12:36:59,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-12 12:36:59,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:36:59,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:59,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-12 12:36:59,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:59,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:36:59,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-12 12:36:59,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-12 12:36:59,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:59,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-12 12:36:59,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:36:59,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,484 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2022-07-12 12:36:59,484 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 12:36:59,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238313674] [2022-07-12 12:36:59,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238313674] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 12:36:59,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1389763155] [2022-07-12 12:36:59,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:36:59,485 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 12:36:59,485 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 12:36:59,486 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 12:36:59,506 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-12 12:36:59,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:36:59,896 INFO L263 TraceCheckSpWp]: Trace formula consists of 1501 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-12 12:36:59,902 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:36:59,966 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 79 trivial. 0 not checked. [2022-07-12 12:36:59,966 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:36:59,967 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1389763155] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:36:59,967 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 12:36:59,967 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [8] total 9 [2022-07-12 12:36:59,967 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355202093] [2022-07-12 12:36:59,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:36:59,968 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-12 12:36:59,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 12:36:59,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-12 12:36:59,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2022-07-12 12:36:59,969 INFO L87 Difference]: Start difference. First operand 1918 states and 2636 transitions. Second operand has 4 states, 4 states have (on average 23.0) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-07-12 12:37:00,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:00,035 INFO L93 Difference]: Finished difference Result 3819 states and 5254 transitions. [2022-07-12 12:37:00,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-12 12:37:00,035 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 23.0) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 161 [2022-07-12 12:37:00,036 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:00,044 INFO L225 Difference]: With dead ends: 3819 [2022-07-12 12:37:00,044 INFO L226 Difference]: Without dead ends: 1919 [2022-07-12 12:37:00,049 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 191 SyntacticMatches, 1 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-07-12 12:37:00,050 INFO L413 NwaCegarLoop]: 310 mSDtfsCounter, 2 mSDsluCounter, 617 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 927 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:00,050 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 927 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 12:37:00,052 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1919 states. [2022-07-12 12:37:00,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1919 to 1919. [2022-07-12 12:37:00,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1919 states, 1597 states have (on average 1.3688165309956168) internal successors, (2186), 1601 states have internal predecessors, (2186), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (245), 221 states have call predecessors, (245), 205 states have call successors, (245) [2022-07-12 12:37:00,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1919 states to 1919 states and 2637 transitions. [2022-07-12 12:37:00,140 INFO L78 Accepts]: Start accepts. Automaton has 1919 states and 2637 transitions. Word has length 161 [2022-07-12 12:37:00,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:00,140 INFO L495 AbstractCegarLoop]: Abstraction has 1919 states and 2637 transitions. [2022-07-12 12:37:00,141 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 23.0) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (17), 2 states have call predecessors, (17), 3 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-07-12 12:37:00,141 INFO L276 IsEmpty]: Start isEmpty. Operand 1919 states and 2637 transitions. [2022-07-12 12:37:00,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-07-12 12:37:00,145 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:00,145 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:00,178 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:00,358 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-07-12 12:37:00,358 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:00,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:00,359 INFO L85 PathProgramCache]: Analyzing trace with hash -1686704921, now seen corresponding path program 1 times [2022-07-12 12:37:00,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:37:00,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1522361158] [2022-07-12 12:37:00,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:00,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:37:00,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 12:37:00,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 12:37:00,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 12:37:00,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-12 12:37:00,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-12 12:37:00,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-07-12 12:37:00,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-12 12:37:00,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-12 12:37:00,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:37:00,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:37:00,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-12 12:37:00,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:37:00,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:37:00,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-12 12:37:00,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-12 12:37:00,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:37:00,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-12 12:37:00,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:37:00,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:00,720 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2022-07-12 12:37:00,720 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 12:37:00,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1522361158] [2022-07-12 12:37:00,721 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1522361158] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 12:37:00,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [153125722] [2022-07-12 12:37:00,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:00,722 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 12:37:00,722 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 12:37:00,723 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 12:37:00,747 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-12 12:37:01,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:01,219 INFO L263 TraceCheckSpWp]: Trace formula consists of 1531 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-12 12:37:01,224 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:01,320 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 39 proven. 1 refuted. 0 times theorem prover too weak. 80 trivial. 0 not checked. [2022-07-12 12:37:01,321 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 12:37:01,560 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2022-07-12 12:37:01,560 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [153125722] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 12:37:01,560 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 12:37:01,560 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 5] total 14 [2022-07-12 12:37:01,561 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [820281953] [2022-07-12 12:37:01,561 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 12:37:01,561 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-07-12 12:37:01,561 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 12:37:01,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-07-12 12:37:01,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=137, Unknown=0, NotChecked=0, Total=182 [2022-07-12 12:37:01,562 INFO L87 Difference]: Start difference. First operand 1919 states and 2637 transitions. Second operand has 14 states, 14 states have (on average 10.785714285714286) internal successors, (151), 10 states have internal predecessors, (151), 2 states have call successors, (45), 6 states have call predecessors, (45), 5 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) [2022-07-12 12:37:03,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:03,358 INFO L93 Difference]: Finished difference Result 4187 states and 5818 transitions. [2022-07-12 12:37:03,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-12 12:37:03,359 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 10.785714285714286) internal successors, (151), 10 states have internal predecessors, (151), 2 states have call successors, (45), 6 states have call predecessors, (45), 5 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) Word has length 163 [2022-07-12 12:37:03,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:03,373 INFO L225 Difference]: With dead ends: 4187 [2022-07-12 12:37:03,373 INFO L226 Difference]: Without dead ends: 2284 [2022-07-12 12:37:03,380 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 371 GetRequests, 351 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 65 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-07-12 12:37:03,381 INFO L413 NwaCegarLoop]: 304 mSDtfsCounter, 274 mSDsluCounter, 1060 mSDsCounter, 0 mSdLazyCounter, 548 mSolverCounterSat, 179 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 1364 SdHoareTripleChecker+Invalid, 727 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 179 IncrementalHoareTripleChecker+Valid, 548 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:03,381 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [285 Valid, 1364 Invalid, 727 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [179 Valid, 548 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-07-12 12:37:03,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2284 states. [2022-07-12 12:37:03,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2284 to 1922. [2022-07-12 12:37:03,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1922 states, 1600 states have (on average 1.368125) internal successors, (2189), 1604 states have internal predecessors, (2189), 206 states have call successors, (206), 96 states have call predecessors, (206), 115 states have return successors, (245), 221 states have call predecessors, (245), 205 states have call successors, (245) [2022-07-12 12:37:03,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1922 states to 1922 states and 2640 transitions. [2022-07-12 12:37:03,472 INFO L78 Accepts]: Start accepts. Automaton has 1922 states and 2640 transitions. Word has length 163 [2022-07-12 12:37:03,472 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:03,472 INFO L495 AbstractCegarLoop]: Abstraction has 1922 states and 2640 transitions. [2022-07-12 12:37:03,473 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 10.785714285714286) internal successors, (151), 10 states have internal predecessors, (151), 2 states have call successors, (45), 6 states have call predecessors, (45), 5 states have return successors, (31), 2 states have call predecessors, (31), 2 states have call successors, (31) [2022-07-12 12:37:03,473 INFO L276 IsEmpty]: Start isEmpty. Operand 1922 states and 2640 transitions. [2022-07-12 12:37:03,477 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2022-07-12 12:37:03,477 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:03,477 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:03,509 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:03,707 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 12:37:03,707 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:03,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:03,708 INFO L85 PathProgramCache]: Analyzing trace with hash 699141421, now seen corresponding path program 2 times [2022-07-12 12:37:03,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:37:03,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1943979633] [2022-07-12 12:37:03,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:03,708 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:37:03,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 12:37:04,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 12:37:04,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 12:37:04,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-07-12 12:37:04,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-07-12 12:37:04,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-12 12:37:04,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-12 12:37:04,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-07-12 12:37:04,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:37:04,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:37:04,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-12 12:37:04,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:37:04,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 12:37:04,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-12 12:37:04,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-12 12:37:04,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:37:04,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-12 12:37:04,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 12:37:04,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:04,577 INFO L134 CoverageAnalysis]: Checked inductivity of 159 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 140 trivial. 0 not checked. [2022-07-12 12:37:04,577 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 12:37:04,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1943979633] [2022-07-12 12:37:04,577 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1943979633] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:37:04,577 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:37:04,578 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2022-07-12 12:37:04,578 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [803218305] [2022-07-12 12:37:04,578 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:37:04,578 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-07-12 12:37:04,579 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 12:37:04,579 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-07-12 12:37:04,579 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=302, Unknown=0, NotChecked=0, Total=342 [2022-07-12 12:37:04,580 INFO L87 Difference]: Start difference. First operand 1922 states and 2640 transitions. Second operand has 19 states, 18 states have (on average 5.111111111111111) internal successors, (92), 12 states have internal predecessors, (92), 4 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 6 states have call predecessors, (16), 4 states have call successors, (16) [2022-07-12 12:37:05,694 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.11s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-12 12:37:08,920 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:08,920 INFO L93 Difference]: Finished difference Result 4519 states and 6356 transitions. [2022-07-12 12:37:08,921 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-07-12 12:37:08,921 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 18 states have (on average 5.111111111111111) internal successors, (92), 12 states have internal predecessors, (92), 4 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 6 states have call predecessors, (16), 4 states have call successors, (16) Word has length 169 [2022-07-12 12:37:08,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:08,933 INFO L225 Difference]: With dead ends: 4519 [2022-07-12 12:37:08,934 INFO L226 Difference]: Without dead ends: 2628 [2022-07-12 12:37:08,939 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 82 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=97, Invalid=715, Unknown=0, NotChecked=0, Total=812 [2022-07-12 12:37:08,940 INFO L413 NwaCegarLoop]: 360 mSDtfsCounter, 362 mSDsluCounter, 3613 mSDsCounter, 0 mSdLazyCounter, 1952 mSolverCounterSat, 199 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 377 SdHoareTripleChecker+Valid, 3973 SdHoareTripleChecker+Invalid, 2151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 199 IncrementalHoareTripleChecker+Valid, 1952 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:08,940 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [377 Valid, 3973 Invalid, 2151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [199 Valid, 1952 Invalid, 0 Unknown, 0 Unchecked, 3.9s Time] [2022-07-12 12:37:08,943 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2628 states. [2022-07-12 12:37:09,068 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2628 to 1962. [2022-07-12 12:37:09,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1962 states, 1632 states have (on average 1.360906862745098) internal successors, (2221), 1636 states have internal predecessors, (2221), 214 states have call successors, (214), 96 states have call predecessors, (214), 115 states have return successors, (253), 229 states have call predecessors, (253), 213 states have call successors, (253) [2022-07-12 12:37:09,077 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1962 states to 1962 states and 2688 transitions. [2022-07-12 12:37:09,078 INFO L78 Accepts]: Start accepts. Automaton has 1962 states and 2688 transitions. Word has length 169 [2022-07-12 12:37:09,078 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:09,079 INFO L495 AbstractCegarLoop]: Abstraction has 1962 states and 2688 transitions. [2022-07-12 12:37:09,079 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 18 states have (on average 5.111111111111111) internal successors, (92), 12 states have internal predecessors, (92), 4 states have call successors, (17), 6 states have call predecessors, (17), 5 states have return successors, (16), 6 states have call predecessors, (16), 4 states have call successors, (16) [2022-07-12 12:37:09,079 INFO L276 IsEmpty]: Start isEmpty. Operand 1962 states and 2688 transitions. [2022-07-12 12:37:09,083 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2022-07-12 12:37:09,083 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:09,083 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:09,083 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-12 12:37:09,084 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:09,084 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:09,084 INFO L85 PathProgramCache]: Analyzing trace with hash 2025494723, now seen corresponding path program 1 times [2022-07-12 12:37:09,084 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 12:37:09,085 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1059299745] [2022-07-12 12:37:09,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:09,085 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 12:37:09,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 12:37:09,273 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-12 12:37:09,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 12:37:09,501 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-12 12:37:09,501 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-12 12:37:09,502 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 12:37:09,504 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-12 12:37:09,506 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:09,509 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 12:37:09,547 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-12 12:37:09,550 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-12 12:37:09,562 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,562 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,563 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,563 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,563 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,564 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,564 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,564 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,564 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,564 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:09,567 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,567 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,568 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,568 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,568 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,568 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,568 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,568 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,569 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,569 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,569 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,569 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,569 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,570 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,570 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,570 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,570 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,570 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,570 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,571 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,571 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,571 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,571 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,571 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,571 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,572 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,573 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,573 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,574 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,574 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,575 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,575 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,575 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,575 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,575 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,576 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,576 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,576 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,576 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,576 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,577 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,577 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,577 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,577 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,577 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,577 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,578 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,578 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,579 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,579 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,579 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,579 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,580 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,580 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,580 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,580 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,580 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,580 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,581 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,581 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,581 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,581 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,581 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,581 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,582 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,582 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,582 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,582 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,582 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,583 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:09,583 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:09,583 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:09,780 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 12:37:09 BoogieIcfgContainer [2022-07-12 12:37:09,781 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 12:37:09,782 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 12:37:09,782 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 12:37:09,782 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 12:37:09,782 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 12:36:40" (3/4) ... [2022-07-12 12:37:09,785 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-12 12:37:09,785 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 12:37:09,786 INFO L158 Benchmark]: Toolchain (without parser) took 32859.37ms. Allocated memory was 98.6MB in the beginning and 297.8MB in the end (delta: 199.2MB). Free memory was 57.9MB in the beginning and 205.4MB in the end (delta: -147.5MB). Peak memory consumption was 51.0MB. Max. memory is 16.1GB. [2022-07-12 12:37:09,786 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 98.6MB. Free memory was 52.7MB in the beginning and 52.6MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 12:37:09,787 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1115.09ms. Allocated memory was 98.6MB in the beginning and 134.2MB in the end (delta: 35.7MB). Free memory was 57.7MB in the beginning and 64.0MB in the end (delta: -6.3MB). Peak memory consumption was 34.1MB. Max. memory is 16.1GB. [2022-07-12 12:37:09,787 INFO L158 Benchmark]: Boogie Procedure Inliner took 146.18ms. Allocated memory is still 134.2MB. Free memory was 64.0MB in the beginning and 86.4MB in the end (delta: -22.4MB). Peak memory consumption was 19.0MB. Max. memory is 16.1GB. [2022-07-12 12:37:09,787 INFO L158 Benchmark]: Boogie Preprocessor took 104.85ms. Allocated memory is still 134.2MB. Free memory was 86.4MB in the beginning and 80.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-12 12:37:09,788 INFO L158 Benchmark]: RCFGBuilder took 1910.12ms. Allocated memory was 134.2MB in the beginning and 197.1MB in the end (delta: 62.9MB). Free memory was 80.1MB in the beginning and 99.9MB in the end (delta: -19.8MB). Peak memory consumption was 87.6MB. Max. memory is 16.1GB. [2022-07-12 12:37:09,788 INFO L158 Benchmark]: TraceAbstraction took 29566.87ms. Allocated memory was 197.1MB in the beginning and 297.8MB in the end (delta: 100.7MB). Free memory was 98.9MB in the beginning and 206.5MB in the end (delta: -107.6MB). Peak memory consumption was 142.0MB. Max. memory is 16.1GB. [2022-07-12 12:37:09,789 INFO L158 Benchmark]: Witness Printer took 3.94ms. Allocated memory is still 297.8MB. Free memory was 206.5MB in the beginning and 205.4MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 12:37:09,791 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 98.6MB. Free memory was 52.7MB in the beginning and 52.6MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1115.09ms. Allocated memory was 98.6MB in the beginning and 134.2MB in the end (delta: 35.7MB). Free memory was 57.7MB in the beginning and 64.0MB in the end (delta: -6.3MB). Peak memory consumption was 34.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 146.18ms. Allocated memory is still 134.2MB. Free memory was 64.0MB in the beginning and 86.4MB in the end (delta: -22.4MB). Peak memory consumption was 19.0MB. Max. memory is 16.1GB. * Boogie Preprocessor took 104.85ms. Allocated memory is still 134.2MB. Free memory was 86.4MB in the beginning and 80.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * RCFGBuilder took 1910.12ms. Allocated memory was 134.2MB in the beginning and 197.1MB in the end (delta: 62.9MB). Free memory was 80.1MB in the beginning and 99.9MB in the end (delta: -19.8MB). Peak memory consumption was 87.6MB. Max. memory is 16.1GB. * TraceAbstraction took 29566.87ms. Allocated memory was 197.1MB in the beginning and 297.8MB in the end (delta: 100.7MB). Free memory was 98.9MB in the beginning and 206.5MB in the end (delta: -107.6MB). Peak memory consumption was 142.0MB. Max. memory is 16.1GB. * Witness Printer took 3.94ms. Allocated memory is still 297.8MB. Free memory was 206.5MB in the beginning and 205.4MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 5639]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 5861. Possible FailurePath: [L5662] int LDV_IN_INTERRUPT = 1; [L5663] int ldv_state_variable_2 ; [L5664] struct usbnet *genelink_info_group0 ; [L5665] int ref_cnt ; [L5666] int ldv_state_variable_1 ; [L5667] int usb_counter ; [L5668] struct usb_interface *gl620a_driver_group1 ; [L5669] int ldv_state_variable_0 ; [L5670] struct sk_buff *genelink_info_group1 ; [L5860-L5862] static struct driver_info const genelink_info = {(char *)"Genesys GeneLink", 4114, & genelink_bind, 0, 0, 0, 0, 0, 0, 0, & genelink_rx_fixup, & genelink_tx_fixup, 0, 0, 1, 2, 0UL}; [L5863-L5865] static struct usb_device_id const products[2U] = { {3U, 1507U, 1282U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned long )(& genelink_info)}}; [L5866] struct usb_device_id const __mod_usb__products_device_table ; [L5867-L5876] static struct usb_driver gl620a_driver = {"gl620a", & usbnet_probe, & usbnet_disconnect, 0, & usbnet_suspend, & usbnet_resume, 0, 0, 0, (struct usb_device_id const *)(& products), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L5893] int ldv_retval_2 ; [L5894] int ldv_retval_5 ; [L5895] int ldv_retval_0 ; [L5896] int ldv_retval_4 ; [L5899] int ldv_retval_1 ; [L5901] int ldv_retval_3 ; [L6187] Element set_impl[15] ; [L6188] int last_index = 0; [L6322] Set LDV_SKBS ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5925] struct usb_device_id *ldvarg1 ; [L5926] void *tmp ; [L5927] pm_message_t ldvarg0 ; [L5928] struct usb_interface *ldvarg3 ; [L5929] void *tmp___0 ; [L5930] gfp_t ldvarg2 ; [L5931] int tmp___1 ; [L5932] int tmp___2 ; [L5933] int tmp___3 ; [L5934] int tmp___4 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=32, tmp___0=1, usb_counter=0] [L5936] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={26:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] tmp = ldv_zalloc(32UL) [L5937] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5938] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] tmp___0 = ldv_zalloc(1560UL) [L5939] ldvarg3 = (struct usb_interface *)tmp___0 [L5940] CALL ldv_initialize() [L6341] CALL ldv_set_init(LDV_SKBS) [L6193] set = set_impl [L6194] last_index = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set={24:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6341] RET ldv_set_init(LDV_SKBS) [L5940] RET ldv_initialize() [L5941] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5942] FCALL memset((void *)(& ldvarg2), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, memset((void *)(& ldvarg2), 0, 4UL)={25:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5943] ldv_state_variable_1 = 0 [L5944] ref_cnt = 0 [L5945] ldv_state_variable_0 = 1 [L5946] ldv_state_variable_2 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: [L6028] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L6029] COND TRUE ldv_state_variable_0 == 1 [L6030] CALL, EXPR gl620a_driver_init() [L5879] int tmp ; [L5881] CALL, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L6167] ldv_func_ret_type ldv_func_res ; [L6168] int tmp ; [L6170] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6436] return __VERIFIER_nondet_int(); [L6170] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6170] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6171] ldv_func_res = tmp [L6172] ldv_state_variable_1 = 1 [L6173] usb_counter = 0 [L6174] CALL ldv_usb_driver_1() [L5916] void *tmp ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=1, usb_counter=0] [L5918] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] tmp = ldv_zalloc(1560UL) [L5919] gl620a_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L6174] RET ldv_usb_driver_1() [L6175] return (ldv_func_res); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, ldv_func_arg1={23:0}, ldv_func_arg1={23:0}, ldv_func_arg2={4294967334:4294967332}, ldv_func_arg2={4294967334:4294967332}, ldv_func_arg3={20:0}, ldv_func_arg3={20:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L5881] RET, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5881] tmp = ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5882] return (tmp); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L6030] RET, EXPR gl620a_driver_init() [L6030] ldv_retval_4 = gl620a_driver_init() [L6031] COND TRUE ldv_retval_4 == 0 [L6032] ldv_state_variable_0 = 3 [L6033] ldv_state_variable_2 = 1 [L6034] CALL ldv_initialize_driver_info_2() [L5904] void *tmp ; [L5905] void *tmp___0 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] CALL, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1472, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1472, tmp___0=1, usb_counter=0] [L5907] RET, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(1472UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] tmp = ldv_zalloc(1472UL) [L5908] genelink_info_group0 = (struct usbnet *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=232, tmp___0=1, usb_counter=0] [L5909] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] tmp___0 = ldv_zalloc(232UL) [L5910] genelink_info_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L6034] RET ldv_initialize_driver_info_2() [L6037] COND FALSE !(ldv_retval_4 != 0) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: [L6052] case 2: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, usb_counter=0] [L6053] COND TRUE ldv_state_variable_2 != 0 [L6054] tmp___4 = __VERIFIER_nondet_int() [L6056] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6057] COND TRUE ldv_state_variable_2 == 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6058] CALL genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5700] struct gl_header *header ; [L5701] struct gl_packet *packet ; [L5702] struct sk_buff *gl_skb ; [L5703] u32 size ; [L5704] u32 count ; [L5705] struct _ddebug descriptor ; [L5706] long tmp ; [L5707] struct _ddebug descriptor___0 ; [L5708] long tmp___0 ; [L5709] size_t __len ; [L5710] void *__ret ; [L5711] unsigned char *tmp___2 ; [L5712] struct _ddebug descriptor___1 ; [L5713] long tmp___3 ; [L5715] EXPR skb->len [L5715] EXPR dev->net [L5715] EXPR (dev->net)->hard_header_len VAL [(dev->net)->hard_header_len=0, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, dev->net={4294967335:-2}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb->len=0, usb_counter=0] [L5715] COND FALSE !(skb->len < (unsigned int )(dev->net)->hard_header_len) [L5719] EXPR skb->data [L5719] header = (struct gl_header *)skb->data [L5720] EXPR header->packet_count [L5720] count = header->packet_count [L5721] COND FALSE !(count > 32U) [L5737] packet = & header->packets VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={4294967317:-8}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5738] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=-3, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5738] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={4294967317:-8}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, usb_counter=0] [L5771] COND TRUE count > 1U VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={4294967317:-8}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5741] EXPR packet->packet_length [L5741] size = packet->packet_length [L5742] COND FALSE !(size > 1514U) [L5758] CALL, EXPR ldv_alloc_skb_12(size, 32U) [L6153] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6325] void *skb ; [L6326] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND FALSE !(tmp___0 != 0) [L5612] EXPR, FCALL calloc(1UL, size) [L5612] tmp = calloc(1UL, size) [L5613] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, calloc(1UL, size)={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={-18446744073709551617:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L5614] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5583] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, cond=1, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5614] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, calloc(1UL, size)={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={-18446744073709551617:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L5615] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={-18446744073709551617:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, calloc(1UL, size)={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={-18446744073709551617:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={-18446744073709551617:0}, tmp___0=0, usb_counter=0] [L6328] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={-18446744073709551617:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6329] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, usb_counter=0] [L6330] COND FALSE !(! skb) [L6333] CALL ldv_set_add(LDV_SKBS, skb) [L6201] int i ; [L6203] i = 0 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6204] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6205] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6215] COND TRUE last_index < 15 [L6216] set_impl[last_index] = e [L6217] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, e={-18446744073709551617:0}, e={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6333] RET ldv_set_add(LDV_SKBS, skb) [L6334] return (skb); VAL [\old(last_index)=0, \result={-18446744073709551617:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={-18446744073709551617:0}, tmp___7={-18446744073709551617:0}, usb_counter=0] [L6155] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_skb_alloc()={-18446744073709551617:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] tmp = ldv_skb_alloc() [L6156] COND TRUE \read(*tmp) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={-18446744073709551617:0}, usb_counter=0] [L6158] CALL, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp___0=-5, usb_counter=0] [L6158] RET, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(size)={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={-18446744073709551617:0}, usb_counter=0] [L6158] tmp->head = ldv_malloc(size) [L6159] EXPR tmp->head [L6159] tmp->data = tmp->head [L6161] return (tmp); VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, \result={-18446744073709551617:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={-18446744073709551617:0}, usb_counter=0] [L5758] RET, EXPR ldv_alloc_skb_12(size, 32U) [L5758] gl_skb = ldv_alloc_skb_12(size, 32U) [L5759] COND TRUE (unsigned long )gl_skb != (unsigned long )((struct sk_buff *)0) [L5760] __len = (size_t )size VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, usb_counter=0] [L5761] CALL, EXPR skb_put(gl_skb, size) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={-18446744073709551617:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6427] EXPR arg0->data [L6427] EXPR arg0->tail [L6427] unsigned char *ret_val = arg0->data + arg0->tail; [L6428] EXPR arg0->tail [L6428] arg0->tail += arg1 [L6429] return ret_val; VAL [\old(arg1)=null, \old(last_index)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={-18446744073709551617:0}, arg0={-18446744073709551617:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, ret_val={0:0}, set_impl={24:0}, usb_counter=0] [L5761] RET, EXPR skb_put(gl_skb, size) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, count=2, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:-4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_put(gl_skb, size)={0:0}, usb_counter=0] [L5761] tmp___2 = skb_put(gl_skb, size) [L5762-L5763] EXPR, FCALL memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5762-L5763] __ret = memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5764] FCALL usbnet_skb_return(dev, gl_skb) [L5767] packet = (struct gl_packet *)(& packet->packet_data) + (unsigned long )size [L5768] count = count - 1U VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5769] CALL skb_pull(skb, size + 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=-7, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5769] RET skb_pull(skb, size + 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, size + 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5771] COND FALSE !(count > 1U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5775] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=-9, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5775] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5776] EXPR skb->len VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, descriptor={27:0}, descriptor___0={29:0}, descriptor___1={30:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb->len=0, tmp___2={0:0}, usb_counter=0] [L5776] COND FALSE !(skb->len > 1514U) [L5792] return (1); [L5792] return (1); [L5792] return (1); [L5792] return (1); VAL [\old(last_index)=0, \result=1, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={4294967334:4294967332}, count=1, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={-18446744073709551617:0}, header={4294967317:-8}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={4294967317:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L6058] RET genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, genelink_rx_fixup(genelink_info_group0, genelink_info_group1)=1, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6059] ldv_state_variable_2 = 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6062] COND FALSE !(ldv_state_variable_2 == 2) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, tmp___4=0, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6021] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L6022] CALL gl620a_driver_exit() [L5888] CALL ldv_usb_deregister_14(& gl620a_driver) [L6181] FCALL usb_deregister(arg) [L6182] ldv_state_variable_1 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, arg={23:0}, arg={23:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5888] RET ldv_usb_deregister_14(& gl620a_driver) [L6022] RET gl620a_driver_exit() [L6023] ldv_state_variable_0 = 2 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldvarg0={26:0}, ldvarg1={0:0}, ldvarg2={25:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6112] CALL ldv_check_final_state() [L6392] int tmp___7 ; [L6394] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L6283] return (last_index == 0); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6394] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L6394] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6395] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp___7=0, usb_counter=0] [L6397] CALL ldv_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5639] reach_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={4294967334:4294967332}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 240 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 29.2s, OverallIterations: 10, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 21.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3122 SdHoareTripleChecker+Valid, 19.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2985 mSDsluCounter, 15413 SdHoareTripleChecker+Invalid, 18.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 12339 mSDsCounter, 1275 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 6081 IncrementalHoareTripleChecker+Invalid, 7356 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1275 mSolverCounterUnsat, 3074 mSDtfsCounter, 6081 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 965 GetRequests, 851 SyntacticMatches, 2 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 214 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1962occurred in iteration=9, InterpolantAutomatonStates: 87, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 9 MinimizatonAttempts, 2749 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.3s SatisfiabilityAnalysisTime, 3.3s InterpolantComputationTime, 1792 NumberOfCodeBlocks, 1792 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1764 ConstructedInterpolants, 0 QuantifiedInterpolants, 3649 SizeOfPredicates, 2 NumberOfNonLiveVariables, 4343 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 13 InterpolantComputations, 8 PerfectInterpolantSequences, 1180/1200 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-12 12:37:09,857 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 12:37:11,799 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 12:37:11,800 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 12:37:11,838 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 12:37:11,839 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 12:37:11,840 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 12:37:11,844 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 12:37:11,848 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 12:37:11,849 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 12:37:11,854 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 12:37:11,855 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 12:37:11,857 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 12:37:11,857 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 12:37:11,859 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 12:37:11,860 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 12:37:11,865 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 12:37:11,866 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 12:37:11,867 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 12:37:11,869 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 12:37:11,874 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 12:37:11,876 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 12:37:11,876 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 12:37:11,878 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 12:37:11,879 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 12:37:11,881 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 12:37:11,883 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 12:37:11,883 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 12:37:11,884 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 12:37:11,885 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 12:37:11,885 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 12:37:11,886 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 12:37:11,886 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 12:37:11,888 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 12:37:11,889 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 12:37:11,890 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 12:37:11,891 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 12:37:11,891 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 12:37:11,891 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 12:37:11,891 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 12:37:11,892 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 12:37:11,892 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 12:37:11,893 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 12:37:11,894 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-07-12 12:37:11,932 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 12:37:11,933 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 12:37:11,933 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 12:37:11,933 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 12:37:11,934 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 12:37:11,934 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 12:37:11,935 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 12:37:11,935 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 12:37:11,935 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 12:37:11,936 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 12:37:11,936 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 12:37:11,936 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 12:37:11,942 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 12:37:11,942 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 12:37:11,942 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-07-12 12:37:11,942 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-07-12 12:37:11,943 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-07-12 12:37:11,943 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 12:37:11,943 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 12:37:11,943 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 12:37:11,943 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 12:37:11,944 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 12:37:11,944 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 12:37:11,944 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 12:37:11,944 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 12:37:11,944 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 12:37:11,945 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 12:37:11,945 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-07-12 12:37:11,945 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-07-12 12:37:11,945 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 12:37:11,946 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 12:37:11,946 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 12:37:11,946 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-07-12 12:37:11,946 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef92dd0c18fa389aa454198685fbcc052698924a127f9f39b737e9548a23680b [2022-07-12 12:37:12,230 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 12:37:12,256 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 12:37:12,259 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 12:37:12,259 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 12:37:12,260 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 12:37:12,262 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-12 12:37:12,322 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/43a722fec/c869fc511c474fe1be4a15213d409042/FLAGf3ad43fe7 [2022-07-12 12:37:12,966 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 12:37:12,967 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-12 12:37:13,003 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/43a722fec/c869fc511c474fe1be4a15213d409042/FLAGf3ad43fe7 [2022-07-12 12:37:13,297 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/43a722fec/c869fc511c474fe1be4a15213d409042 [2022-07-12 12:37:13,300 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 12:37:13,301 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 12:37:13,303 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 12:37:13,303 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 12:37:13,307 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 12:37:13,308 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 12:37:13" (1/1) ... [2022-07-12 12:37:13,308 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@268e7149 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:13, skipping insertion in model container [2022-07-12 12:37:13,309 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 12:37:13" (1/1) ... [2022-07-12 12:37:13,315 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 12:37:13,413 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 12:37:14,072 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-12 12:37:14,246 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 12:37:14,272 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-07-12 12:37:14,295 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 12:37:14,434 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-12 12:37:14,504 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 12:37:14,529 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 12:37:14,671 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i[160969,160982] [2022-07-12 12:37:14,724 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 12:37:14,784 INFO L208 MainTranslator]: Completed translation [2022-07-12 12:37:14,784 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14 WrapperNode [2022-07-12 12:37:14,784 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 12:37:14,786 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 12:37:14,786 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 12:37:14,786 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 12:37:14,791 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:14,847 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:14,916 INFO L137 Inliner]: procedures = 115, calls = 368, calls flagged for inlining = 41, calls inlined = 38, statements flattened = 932 [2022-07-12 12:37:14,916 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 12:37:14,918 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 12:37:14,918 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 12:37:14,918 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 12:37:14,929 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:14,930 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:14,943 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:14,944 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:14,988 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:14,995 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:15,002 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:15,027 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 12:37:15,028 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 12:37:15,028 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 12:37:15,028 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 12:37:15,029 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (1/1) ... [2022-07-12 12:37:15,039 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 12:37:15,048 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 12:37:15,060 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 12:37:15,106 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 12:37:15,111 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-07-12 12:37:15,111 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-07-12 12:37:15,112 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-07-12 12:37:15,113 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-07-12 12:37:15,113 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-07-12 12:37:15,113 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-12 12:37:15,113 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-12 12:37:15,113 INFO L130 BoogieDeclarations]: Found specification of procedure usbnet_disconnect [2022-07-12 12:37:15,114 INFO L138 BoogieDeclarations]: Found implementation of procedure usbnet_disconnect [2022-07-12 12:37:15,114 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2022-07-12 12:37:15,114 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2022-07-12 12:37:15,114 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-12 12:37:15,114 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-12 12:37:15,114 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_skb_alloc [2022-07-12 12:37:15,114 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_skb_alloc [2022-07-12 12:37:15,115 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-12 12:37:15,115 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-12 12:37:15,115 INFO L130 BoogieDeclarations]: Found specification of procedure skb_pull [2022-07-12 12:37:15,115 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_pull [2022-07-12 12:37:15,115 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2022-07-12 12:37:15,115 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2022-07-12 12:37:15,115 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2022-07-12 12:37:15,116 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2022-07-12 12:37:15,116 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-12 12:37:15,116 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-12 12:37:15,116 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-12 12:37:15,116 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-12 12:37:15,116 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-12 12:37:15,116 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-12 12:37:15,117 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-12 12:37:15,117 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 12:37:15,117 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-12 12:37:15,117 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-12 12:37:15,118 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2022-07-12 12:37:15,118 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2022-07-12 12:37:15,118 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2022-07-12 12:37:15,118 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-12 12:37:15,118 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_tx_fixup [2022-07-12 12:37:15,118 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_tx_fixup [2022-07-12 12:37:15,119 INFO L130 BoogieDeclarations]: Found specification of procedure genelink_rx_fixup [2022-07-12 12:37:15,119 INFO L138 BoogieDeclarations]: Found implementation of procedure genelink_rx_fixup [2022-07-12 12:37:15,119 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-07-12 12:37:15,119 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-07-12 12:37:15,119 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-12 12:37:15,119 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-07-12 12:37:15,119 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-12 12:37:15,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-07-12 12:37:15,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-07-12 12:37:15,121 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-07-12 12:37:15,121 INFO L130 BoogieDeclarations]: Found specification of procedure skb_put [2022-07-12 12:37:15,121 INFO L138 BoogieDeclarations]: Found implementation of procedure skb_put [2022-07-12 12:37:15,121 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2022-07-12 12:37:15,122 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-12 12:37:15,123 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-12 12:37:15,123 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 12:37:15,123 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 12:37:15,569 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 12:37:15,570 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 12:37:15,749 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-12 12:37:25,434 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 12:37:25,448 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 12:37:25,451 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-12 12:37:25,456 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 12:37:25 BoogieIcfgContainer [2022-07-12 12:37:25,456 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 12:37:25,458 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 12:37:25,459 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 12:37:25,461 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 12:37:25,462 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 12:37:13" (1/3) ... [2022-07-12 12:37:25,462 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a54de5a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 12:37:25, skipping insertion in model container [2022-07-12 12:37:25,462 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 12:37:14" (2/3) ... [2022-07-12 12:37:25,463 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a54de5a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 12:37:25, skipping insertion in model container [2022-07-12 12:37:25,463 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 12:37:25" (3/3) ... [2022-07-12 12:37:25,464 INFO L111 eAbstractionObserver]: Analyzing ICFG 205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--usb--gl620a.ko-entry_point.cil.out.i [2022-07-12 12:37:25,481 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 12:37:25,481 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 12:37:25,581 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 12:37:25,588 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@666caa99, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@648ad40b [2022-07-12 12:37:25,588 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 12:37:25,595 INFO L276 IsEmpty]: Start isEmpty. Operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) [2022-07-12 12:37:25,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-07-12 12:37:25,609 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:25,610 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:25,610 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:25,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:25,617 INFO L85 PathProgramCache]: Analyzing trace with hash 721078938, now seen corresponding path program 1 times [2022-07-12 12:37:25,632 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:25,634 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1288485836] [2022-07-12 12:37:25,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:25,635 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:25,635 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:25,641 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:25,683 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-07-12 12:37:26,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:26,126 INFO L263 TraceCheckSpWp]: Trace formula consists of 537 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-12 12:37:26,133 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:26,311 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-07-12 12:37:26,313 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:37:26,314 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 12:37:26,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1288485836] [2022-07-12 12:37:26,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1288485836] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:37:26,315 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:37:26,316 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-12 12:37:26,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [743619318] [2022-07-12 12:37:26,318 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:37:26,323 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-12 12:37:26,323 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 12:37:26,353 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-12 12:37:26,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-12 12:37:26,362 INFO L87 Difference]: Start difference. First operand has 239 states, 188 states have (on average 1.398936170212766) internal successors, (263), 194 states have internal predecessors, (263), 36 states have call successors, (36), 14 states have call predecessors, (36), 13 states have return successors, (32), 32 states have call predecessors, (32), 32 states have call successors, (32) Second operand has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 12:37:26,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:26,561 INFO L93 Difference]: Finished difference Result 476 states and 682 transitions. [2022-07-12 12:37:26,567 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-12 12:37:26,568 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 42 [2022-07-12 12:37:26,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:26,580 INFO L225 Difference]: With dead ends: 476 [2022-07-12 12:37:26,583 INFO L226 Difference]: Without dead ends: 229 [2022-07-12 12:37:26,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-12 12:37:26,596 INFO L413 NwaCegarLoop]: 323 mSDtfsCounter, 2 mSDsluCounter, 643 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 966 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:26,598 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 966 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 12:37:26,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2022-07-12 12:37:26,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 229. [2022-07-12 12:37:26,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 229 states, 184 states have (on average 1.358695652173913) internal successors, (250), 184 states have internal predecessors, (250), 32 states have call successors, (32), 13 states have call predecessors, (32), 12 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) [2022-07-12 12:37:26,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 229 states to 229 states and 313 transitions. [2022-07-12 12:37:26,674 INFO L78 Accepts]: Start accepts. Automaton has 229 states and 313 transitions. Word has length 42 [2022-07-12 12:37:26,676 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:26,677 INFO L495 AbstractCegarLoop]: Abstraction has 229 states and 313 transitions. [2022-07-12 12:37:26,677 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 12:37:26,677 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 313 transitions. [2022-07-12 12:37:26,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-12 12:37:26,682 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:26,682 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:26,703 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:26,901 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:26,901 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:26,902 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:26,902 INFO L85 PathProgramCache]: Analyzing trace with hash 1187275936, now seen corresponding path program 1 times [2022-07-12 12:37:26,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:26,903 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [347602242] [2022-07-12 12:37:26,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:26,903 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:26,904 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:26,905 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:26,940 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-07-12 12:37:27,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:27,445 INFO L263 TraceCheckSpWp]: Trace formula consists of 559 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-12 12:37:27,447 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:27,596 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-07-12 12:37:27,596 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 12:37:27,995 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-07-12 12:37:27,996 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 12:37:27,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [347602242] [2022-07-12 12:37:27,996 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [347602242] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 12:37:27,996 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-07-12 12:37:27,996 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2022-07-12 12:37:27,997 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [167535167] [2022-07-12 12:37:27,997 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-07-12 12:37:27,998 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-12 12:37:27,998 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 12:37:27,999 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-12 12:37:27,999 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-12 12:37:27,999 INFO L87 Difference]: Start difference. First operand 229 states and 313 transitions. Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-12 12:37:28,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:28,423 INFO L93 Difference]: Finished difference Result 456 states and 626 transitions. [2022-07-12 12:37:28,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-12 12:37:28,424 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 44 [2022-07-12 12:37:28,424 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:28,426 INFO L225 Difference]: With dead ends: 456 [2022-07-12 12:37:28,426 INFO L226 Difference]: Without dead ends: 232 [2022-07-12 12:37:28,427 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2022-07-12 12:37:28,428 INFO L413 NwaCegarLoop]: 310 mSDtfsCounter, 9 mSDsluCounter, 1540 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 1850 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:28,428 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 1850 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 12:37:28,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 232 states. [2022-07-12 12:37:28,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 232 to 232. [2022-07-12 12:37:28,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 187 states have (on average 1.3529411764705883) internal successors, (253), 187 states have internal predecessors, (253), 32 states have call successors, (32), 13 states have call predecessors, (32), 12 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) [2022-07-12 12:37:28,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 316 transitions. [2022-07-12 12:37:28,441 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 316 transitions. Word has length 44 [2022-07-12 12:37:28,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:28,442 INFO L495 AbstractCegarLoop]: Abstraction has 232 states and 316 transitions. [2022-07-12 12:37:28,442 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-12 12:37:28,442 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 316 transitions. [2022-07-12 12:37:28,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-07-12 12:37:28,444 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:28,444 INFO L195 NwaCegarLoop]: trace histogram [8, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:28,466 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:28,666 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:28,666 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:28,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:28,667 INFO L85 PathProgramCache]: Analyzing trace with hash -1706437862, now seen corresponding path program 2 times [2022-07-12 12:37:28,668 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:28,668 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2006730883] [2022-07-12 12:37:28,668 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-07-12 12:37:28,668 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:28,668 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:28,669 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:28,670 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-07-12 12:37:29,017 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2022-07-12 12:37:29,017 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-07-12 12:37:29,037 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-12 12:37:29,039 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:29,123 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-07-12 12:37:29,123 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:37:29,123 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 12:37:29,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2006730883] [2022-07-12 12:37:29,123 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2006730883] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:37:29,124 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:37:29,124 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 12:37:29,124 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1101595080] [2022-07-12 12:37:29,124 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:37:29,124 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 12:37:29,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 12:37:29,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 12:37:29,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 12:37:29,125 INFO L87 Difference]: Start difference. First operand 232 states and 316 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-12 12:37:31,168 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-12 12:37:31,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:31,293 INFO L93 Difference]: Finished difference Result 635 states and 876 transitions. [2022-07-12 12:37:31,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 12:37:31,294 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 50 [2022-07-12 12:37:31,294 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:31,296 INFO L225 Difference]: With dead ends: 635 [2022-07-12 12:37:31,297 INFO L226 Difference]: Without dead ends: 423 [2022-07-12 12:37:31,297 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 12:37:31,298 INFO L413 NwaCegarLoop]: 343 mSDtfsCounter, 267 mSDsluCounter, 293 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 3 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 267 SdHoareTripleChecker+Valid, 636 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:31,298 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [267 Valid, 636 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 11 Invalid, 1 Unknown, 0 Unchecked, 2.1s Time] [2022-07-12 12:37:31,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 423 states. [2022-07-12 12:37:31,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 423 to 423. [2022-07-12 12:37:31,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 423 states, 343 states have (on average 1.370262390670554) internal successors, (470), 343 states have internal predecessors, (470), 56 states have call successors, (56), 24 states have call predecessors, (56), 23 states have return successors, (55), 55 states have call predecessors, (55), 55 states have call successors, (55) [2022-07-12 12:37:31,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 423 states to 423 states and 581 transitions. [2022-07-12 12:37:31,321 INFO L78 Accepts]: Start accepts. Automaton has 423 states and 581 transitions. Word has length 50 [2022-07-12 12:37:31,321 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:31,321 INFO L495 AbstractCegarLoop]: Abstraction has 423 states and 581 transitions. [2022-07-12 12:37:31,321 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-12 12:37:31,321 INFO L276 IsEmpty]: Start isEmpty. Operand 423 states and 581 transitions. [2022-07-12 12:37:31,324 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-12 12:37:31,324 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:31,324 INFO L195 NwaCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:31,342 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:31,542 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:31,543 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:31,543 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:31,543 INFO L85 PathProgramCache]: Analyzing trace with hash 1850955474, now seen corresponding path program 1 times [2022-07-12 12:37:31,544 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:31,544 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [928210068] [2022-07-12 12:37:31,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:31,545 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:31,545 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:31,546 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:31,551 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-07-12 12:37:32,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:32,160 INFO L263 TraceCheckSpWp]: Trace formula consists of 669 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-12 12:37:32,163 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:32,672 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-07-12 12:37:32,672 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:37:32,672 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 12:37:32,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [928210068] [2022-07-12 12:37:32,672 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [928210068] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:37:32,672 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:37:32,673 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 12:37:32,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [814975072] [2022-07-12 12:37:32,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:37:32,673 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 12:37:32,673 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 12:37:32,673 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 12:37:32,674 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 12:37:32,674 INFO L87 Difference]: Start difference. First operand 423 states and 581 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 12:37:32,998 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:32,999 INFO L93 Difference]: Finished difference Result 1226 states and 1705 transitions. [2022-07-12 12:37:32,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 12:37:32,999 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-07-12 12:37:33,000 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:33,006 INFO L225 Difference]: With dead ends: 1226 [2022-07-12 12:37:33,006 INFO L226 Difference]: Without dead ends: 817 [2022-07-12 12:37:33,008 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-12 12:37:33,009 INFO L413 NwaCegarLoop]: 344 mSDtfsCounter, 275 mSDsluCounter, 977 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 275 SdHoareTripleChecker+Valid, 1321 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:33,009 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [275 Valid, 1321 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 12:37:33,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 817 states. [2022-07-12 12:37:33,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 817 to 817. [2022-07-12 12:37:33,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 817 states, 664 states have (on average 1.3734939759036144) internal successors, (912), 664 states have internal predecessors, (912), 107 states have call successors, (107), 46 states have call predecessors, (107), 45 states have return successors, (112), 106 states have call predecessors, (112), 106 states have call successors, (112) [2022-07-12 12:37:33,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 817 states to 817 states and 1131 transitions. [2022-07-12 12:37:33,065 INFO L78 Accepts]: Start accepts. Automaton has 817 states and 1131 transitions. Word has length 60 [2022-07-12 12:37:33,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:33,065 INFO L495 AbstractCegarLoop]: Abstraction has 817 states and 1131 transitions. [2022-07-12 12:37:33,065 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 12:37:33,065 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 1131 transitions. [2022-07-12 12:37:33,071 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2022-07-12 12:37:33,071 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:33,072 INFO L195 NwaCegarLoop]: trace histogram [8, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:33,097 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2022-07-12 12:37:33,293 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:33,293 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:33,293 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:33,294 INFO L85 PathProgramCache]: Analyzing trace with hash 1982093192, now seen corresponding path program 1 times [2022-07-12 12:37:33,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:33,294 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1267458712] [2022-07-12 12:37:33,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:33,295 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:33,295 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:33,296 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:33,297 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-07-12 12:37:33,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:33,991 INFO L263 TraceCheckSpWp]: Trace formula consists of 913 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-12 12:37:33,996 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:34,077 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2022-07-12 12:37:34,077 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:37:34,078 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 12:37:34,078 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1267458712] [2022-07-12 12:37:34,078 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1267458712] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:37:34,078 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:37:34,078 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 12:37:34,078 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [736299451] [2022-07-12 12:37:34,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:37:34,079 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 12:37:34,079 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 12:37:34,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 12:37:34,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 12:37:34,080 INFO L87 Difference]: Start difference. First operand 817 states and 1131 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-12 12:37:34,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:34,415 INFO L93 Difference]: Finished difference Result 1844 states and 2569 transitions. [2022-07-12 12:37:34,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 12:37:34,416 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 134 [2022-07-12 12:37:34,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:34,422 INFO L225 Difference]: With dead ends: 1844 [2022-07-12 12:37:34,423 INFO L226 Difference]: Without dead ends: 1047 [2022-07-12 12:37:34,426 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 12:37:34,427 INFO L413 NwaCegarLoop]: 327 mSDtfsCounter, 111 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 598 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:34,427 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 598 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-12 12:37:34,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1047 states. [2022-07-12 12:37:34,478 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1047 to 1038. [2022-07-12 12:37:34,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1038 states, 862 states have (on average 1.3979118329466358) internal successors, (1205), 862 states have internal predecessors, (1205), 120 states have call successors, (120), 56 states have call predecessors, (120), 55 states have return successors, (125), 119 states have call predecessors, (125), 119 states have call successors, (125) [2022-07-12 12:37:34,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1038 states to 1038 states and 1450 transitions. [2022-07-12 12:37:34,487 INFO L78 Accepts]: Start accepts. Automaton has 1038 states and 1450 transitions. Word has length 134 [2022-07-12 12:37:34,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:34,487 INFO L495 AbstractCegarLoop]: Abstraction has 1038 states and 1450 transitions. [2022-07-12 12:37:34,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-12 12:37:34,488 INFO L276 IsEmpty]: Start isEmpty. Operand 1038 states and 1450 transitions. [2022-07-12 12:37:34,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-07-12 12:37:34,497 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:34,497 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:34,522 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:34,718 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:34,718 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:34,719 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:34,719 INFO L85 PathProgramCache]: Analyzing trace with hash 888649648, now seen corresponding path program 1 times [2022-07-12 12:37:34,720 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:34,720 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [491643939] [2022-07-12 12:37:34,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:34,720 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:34,721 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:34,722 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:34,723 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-07-12 12:37:35,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:35,387 INFO L263 TraceCheckSpWp]: Trace formula consists of 975 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-12 12:37:35,393 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:35,653 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2022-07-12 12:37:35,653 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:37:35,653 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 12:37:35,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [491643939] [2022-07-12 12:37:35,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [491643939] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:37:35,654 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:37:35,654 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 12:37:35,654 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2068047549] [2022-07-12 12:37:35,654 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:37:35,654 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 12:37:35,654 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 12:37:35,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 12:37:35,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 12:37:35,655 INFO L87 Difference]: Start difference. First operand 1038 states and 1450 transitions. Second operand has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 12:37:37,697 WARN L534 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-07-12 12:37:38,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:38,110 INFO L93 Difference]: Finished difference Result 2758 states and 3855 transitions. [2022-07-12 12:37:38,111 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 12:37:38,112 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 156 [2022-07-12 12:37:38,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:38,140 INFO L225 Difference]: With dead ends: 2758 [2022-07-12 12:37:38,141 INFO L226 Difference]: Without dead ends: 1751 [2022-07-12 12:37:38,146 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 154 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 12:37:38,147 INFO L413 NwaCegarLoop]: 452 mSDtfsCounter, 257 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 12 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 257 SdHoareTripleChecker+Valid, 720 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:38,149 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [257 Valid, 720 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 22 Invalid, 1 Unknown, 0 Unchecked, 2.4s Time] [2022-07-12 12:37:38,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1751 states. [2022-07-12 12:37:38,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1751 to 1742. [2022-07-12 12:37:38,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1742 states, 1452 states have (on average 1.3836088154269972) internal successors, (2009), 1452 states have internal predecessors, (2009), 194 states have call successors, (194), 96 states have call predecessors, (194), 95 states have return successors, (201), 193 states have call predecessors, (201), 193 states have call successors, (201) [2022-07-12 12:37:38,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1742 states to 1742 states and 2404 transitions. [2022-07-12 12:37:38,231 INFO L78 Accepts]: Start accepts. Automaton has 1742 states and 2404 transitions. Word has length 156 [2022-07-12 12:37:38,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:38,231 INFO L495 AbstractCegarLoop]: Abstraction has 1742 states and 2404 transitions. [2022-07-12 12:37:38,232 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.666666666666668) internal successors, (92), 3 states have internal predecessors, (92), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-12 12:37:38,232 INFO L276 IsEmpty]: Start isEmpty. Operand 1742 states and 2404 transitions. [2022-07-12 12:37:38,238 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2022-07-12 12:37:38,238 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:38,238 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:38,268 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:38,460 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:38,460 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:38,461 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:38,461 INFO L85 PathProgramCache]: Analyzing trace with hash 685653102, now seen corresponding path program 1 times [2022-07-12 12:37:38,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:38,462 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [72617094] [2022-07-12 12:37:38,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:38,462 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:38,463 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:38,464 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:38,465 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-07-12 12:37:39,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:39,038 INFO L263 TraceCheckSpWp]: Trace formula consists of 975 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-12 12:37:39,042 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:39,276 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 110 trivial. 0 not checked. [2022-07-12 12:37:39,276 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:37:39,277 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 12:37:39,277 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [72617094] [2022-07-12 12:37:39,277 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [72617094] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:37:39,277 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:37:39,277 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 12:37:39,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1948369003] [2022-07-12 12:37:39,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:37:39,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 12:37:39,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 12:37:39,279 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 12:37:39,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 12:37:39,279 INFO L87 Difference]: Start difference. First operand 1742 states and 2404 transitions. Second operand has 5 states, 5 states have (on average 18.4) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-07-12 12:37:39,458 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:39,458 INFO L93 Difference]: Finished difference Result 3507 states and 4868 transitions. [2022-07-12 12:37:39,459 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 12:37:39,459 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.4) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 156 [2022-07-12 12:37:39,459 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:39,467 INFO L225 Difference]: With dead ends: 3507 [2022-07-12 12:37:39,467 INFO L226 Difference]: Without dead ends: 1796 [2022-07-12 12:37:39,471 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 152 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 12:37:39,472 INFO L413 NwaCegarLoop]: 310 mSDtfsCounter, 2 mSDsluCounter, 919 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1229 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:39,472 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 1229 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 12:37:39,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1796 states. [2022-07-12 12:37:39,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1796 to 1782. [2022-07-12 12:37:39,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1782 states, 1480 states have (on average 1.3763513513513514) internal successors, (2037), 1484 states have internal predecessors, (2037), 194 states have call successors, (194), 96 states have call predecessors, (194), 107 states have return successors, (221), 201 states have call predecessors, (221), 193 states have call successors, (221) [2022-07-12 12:37:39,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1782 states to 1782 states and 2452 transitions. [2022-07-12 12:37:39,529 INFO L78 Accepts]: Start accepts. Automaton has 1782 states and 2452 transitions. Word has length 156 [2022-07-12 12:37:39,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:39,529 INFO L495 AbstractCegarLoop]: Abstraction has 1782 states and 2452 transitions. [2022-07-12 12:37:39,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.4) internal successors, (92), 4 states have internal predecessors, (92), 2 states have call successors, (16), 2 states have call predecessors, (16), 3 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-07-12 12:37:39,530 INFO L276 IsEmpty]: Start isEmpty. Operand 1782 states and 2452 transitions. [2022-07-12 12:37:39,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2022-07-12 12:37:39,534 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:39,534 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:39,568 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:39,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:39,755 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:39,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:39,756 INFO L85 PathProgramCache]: Analyzing trace with hash -1189811930, now seen corresponding path program 1 times [2022-07-12 12:37:39,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:39,757 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1620721467] [2022-07-12 12:37:39,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:39,757 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:39,757 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:39,761 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:39,762 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-07-12 12:37:40,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:40,398 INFO L263 TraceCheckSpWp]: Trace formula consists of 1001 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-12 12:37:40,402 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:41,016 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 37 proven. 0 refuted. 0 times theorem prover too weak. 110 trivial. 0 not checked. [2022-07-12 12:37:41,017 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:37:41,017 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 12:37:41,017 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1620721467] [2022-07-12 12:37:41,017 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1620721467] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:37:41,017 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:37:41,018 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-12 12:37:41,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1206197071] [2022-07-12 12:37:41,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:37:41,019 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-12 12:37:41,019 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 12:37:41,019 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-12 12:37:41,019 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-07-12 12:37:41,020 INFO L87 Difference]: Start difference. First operand 1782 states and 2452 transitions. Second operand has 10 states, 10 states have (on average 9.7) internal successors, (97), 8 states have internal predecessors, (97), 3 states have call successors, (17), 2 states have call predecessors, (17), 4 states have return successors, (16), 5 states have call predecessors, (16), 3 states have call successors, (16) [2022-07-12 12:37:41,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:41,965 INFO L93 Difference]: Finished difference Result 3803 states and 5284 transitions. [2022-07-12 12:37:41,966 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-12 12:37:41,966 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.7) internal successors, (97), 8 states have internal predecessors, (97), 3 states have call successors, (17), 2 states have call predecessors, (17), 4 states have return successors, (16), 5 states have call predecessors, (16), 3 states have call successors, (16) Word has length 163 [2022-07-12 12:37:41,966 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:41,976 INFO L225 Difference]: With dead ends: 3803 [2022-07-12 12:37:41,977 INFO L226 Difference]: Without dead ends: 2052 [2022-07-12 12:37:41,982 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 155 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2022-07-12 12:37:41,983 INFO L413 NwaCegarLoop]: 360 mSDtfsCounter, 43 mSDsluCounter, 2796 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 3156 SdHoareTripleChecker+Invalid, 102 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:41,983 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 3156 Invalid, 102 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-12 12:37:41,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2052 states. [2022-07-12 12:37:42,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2052 to 1806. [2022-07-12 12:37:42,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1806 states, 1500 states have (on average 1.366) internal successors, (2049), 1500 states have internal predecessors, (2049), 194 states have call successors, (194), 96 states have call predecessors, (194), 111 states have return successors, (225), 209 states have call predecessors, (225), 193 states have call successors, (225) [2022-07-12 12:37:42,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1806 states to 1806 states and 2468 transitions. [2022-07-12 12:37:42,054 INFO L78 Accepts]: Start accepts. Automaton has 1806 states and 2468 transitions. Word has length 163 [2022-07-12 12:37:42,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:42,054 INFO L495 AbstractCegarLoop]: Abstraction has 1806 states and 2468 transitions. [2022-07-12 12:37:42,055 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.7) internal successors, (97), 8 states have internal predecessors, (97), 3 states have call successors, (17), 2 states have call predecessors, (17), 4 states have return successors, (16), 5 states have call predecessors, (16), 3 states have call successors, (16) [2022-07-12 12:37:42,055 INFO L276 IsEmpty]: Start isEmpty. Operand 1806 states and 2468 transitions. [2022-07-12 12:37:42,059 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2022-07-12 12:37:42,059 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:42,060 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:42,092 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2022-07-12 12:37:42,275 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:42,275 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:42,275 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:42,276 INFO L85 PathProgramCache]: Analyzing trace with hash 699141421, now seen corresponding path program 1 times [2022-07-12 12:37:42,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:42,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [899751849] [2022-07-12 12:37:42,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:42,277 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:42,277 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:42,279 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:42,281 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-07-12 12:37:43,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 12:37:43,076 INFO L263 TraceCheckSpWp]: Trace formula consists of 1027 conjuncts, 22 conjunts are in the unsatisfiable core [2022-07-12 12:37:43,080 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 12:37:44,342 INFO L134 CoverageAnalysis]: Checked inductivity of 159 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2022-07-12 12:37:44,343 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 12:37:44,343 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 12:37:44,343 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [899751849] [2022-07-12 12:37:44,343 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [899751849] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 12:37:44,343 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 12:37:44,343 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2022-07-12 12:37:44,344 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [661125838] [2022-07-12 12:37:44,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 12:37:44,344 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-07-12 12:37:44,344 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 12:37:44,345 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-07-12 12:37:44,345 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=133, Unknown=0, NotChecked=0, Total=156 [2022-07-12 12:37:44,345 INFO L87 Difference]: Start difference. First operand 1806 states and 2468 transitions. Second operand has 13 states, 13 states have (on average 7.538461538461538) internal successors, (98), 10 states have internal predecessors, (98), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-07-12 12:37:47,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 12:37:47,287 INFO L93 Difference]: Finished difference Result 4083 states and 5652 transitions. [2022-07-12 12:37:47,289 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-07-12 12:37:47,289 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 7.538461538461538) internal successors, (98), 10 states have internal predecessors, (98), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) Word has length 169 [2022-07-12 12:37:47,289 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 12:37:47,298 INFO L225 Difference]: With dead ends: 4083 [2022-07-12 12:37:47,299 INFO L226 Difference]: Without dead ends: 2308 [2022-07-12 12:37:47,304 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=54, Invalid=326, Unknown=0, NotChecked=0, Total=380 [2022-07-12 12:37:47,306 INFO L413 NwaCegarLoop]: 394 mSDtfsCounter, 97 mSDsluCounter, 4113 mSDsCounter, 0 mSdLazyCounter, 277 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 4507 SdHoareTripleChecker+Invalid, 294 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-07-12 12:37:47,306 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 4507 Invalid, 294 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 277 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-07-12 12:37:47,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2308 states. [2022-07-12 12:37:47,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2308 to 1846. [2022-07-12 12:37:47,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1846 states, 1532 states have (on average 1.358355091383812) internal successors, (2081), 1532 states have internal predecessors, (2081), 202 states have call successors, (202), 96 states have call predecessors, (202), 111 states have return successors, (233), 217 states have call predecessors, (233), 201 states have call successors, (233) [2022-07-12 12:37:47,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1846 states to 1846 states and 2516 transitions. [2022-07-12 12:37:47,397 INFO L78 Accepts]: Start accepts. Automaton has 1846 states and 2516 transitions. Word has length 169 [2022-07-12 12:37:47,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 12:37:47,398 INFO L495 AbstractCegarLoop]: Abstraction has 1846 states and 2516 transitions. [2022-07-12 12:37:47,398 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 7.538461538461538) internal successors, (98), 10 states have internal predecessors, (98), 3 states have call successors, (18), 2 states have call predecessors, (18), 5 states have return successors, (17), 6 states have call predecessors, (17), 3 states have call successors, (17) [2022-07-12 12:37:47,398 INFO L276 IsEmpty]: Start isEmpty. Operand 1846 states and 2516 transitions. [2022-07-12 12:37:47,403 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2022-07-12 12:37:47,404 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 12:37:47,404 INFO L195 NwaCegarLoop]: trace histogram [8, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:47,431 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:47,619 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:47,619 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 12:37:47,620 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 12:37:47,620 INFO L85 PathProgramCache]: Analyzing trace with hash 2025494723, now seen corresponding path program 1 times [2022-07-12 12:37:47,621 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 12:37:47,621 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [712922943] [2022-07-12 12:37:47,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 12:37:47,621 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 12:37:47,621 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 12:37:47,623 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 12:37:47,625 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-07-12 12:37:52,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 12:37:52,403 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-12 12:37:56,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 12:37:56,983 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-07-12 12:37:56,983 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-12 12:37:56,984 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 12:37:57,038 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-07-12 12:37:57,207 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 12:37:57,210 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 12:37:57,213 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 12:37:57,252 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-12 12:37:57,255 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-12 12:37:57,268 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,268 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,268 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,269 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,269 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,269 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,270 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,270 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,270 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,270 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2022-07-12 12:37:57,273 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,273 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,273 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,274 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,274 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,274 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,274 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,274 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,275 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,275 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,275 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,275 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,275 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,276 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,276 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,276 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,276 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,276 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,276 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,277 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,277 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,277 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,278 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,278 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,279 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,279 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,279 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,280 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,280 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,280 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,281 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,281 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,281 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,281 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,282 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,282 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,282 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,282 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,282 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,283 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,283 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,283 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,283 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,283 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,283 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,284 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,284 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,284 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,285 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,285 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,285 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,286 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,286 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,286 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,286 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,287 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,287 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,287 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,287 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,287 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,287 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,288 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,288 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,288 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,288 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,288 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,289 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,289 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,289 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,289 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled [2022-07-12 12:37:57,289 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled [2022-07-12 12:37:57,289 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled [2022-07-12 12:37:57,464 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 12:37:57 BoogieIcfgContainer [2022-07-12 12:37:57,464 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 12:37:57,465 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 12:37:57,465 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 12:37:57,465 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 12:37:57,465 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 12:37:25" (3/4) ... [2022-07-12 12:37:57,468 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-12 12:37:57,468 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 12:37:57,468 INFO L158 Benchmark]: Toolchain (without parser) took 44167.84ms. Allocated memory was 56.6MB in the beginning and 188.7MB in the end (delta: 132.1MB). Free memory was 27.1MB in the beginning and 69.9MB in the end (delta: -42.9MB). Peak memory consumption was 87.7MB. Max. memory is 16.1GB. [2022-07-12 12:37:57,469 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 56.6MB. Free memory was 38.3MB in the beginning and 38.3MB in the end (delta: 52.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 12:37:57,469 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1481.63ms. Allocated memory was 56.6MB in the beginning and 100.7MB in the end (delta: 44.0MB). Free memory was 26.8MB in the beginning and 50.3MB in the end (delta: -23.4MB). Peak memory consumption was 47.8MB. Max. memory is 16.1GB. [2022-07-12 12:37:57,470 INFO L158 Benchmark]: Boogie Procedure Inliner took 131.00ms. Allocated memory is still 100.7MB. Free memory was 50.3MB in the beginning and 43.6MB in the end (delta: 6.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-12 12:37:57,470 INFO L158 Benchmark]: Boogie Preprocessor took 109.32ms. Allocated memory is still 100.7MB. Free memory was 43.6MB in the beginning and 36.5MB in the end (delta: 7.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-12 12:37:57,470 INFO L158 Benchmark]: RCFGBuilder took 10428.83ms. Allocated memory was 100.7MB in the beginning and 140.5MB in the end (delta: 39.8MB). Free memory was 36.5MB in the beginning and 39.7MB in the end (delta: -3.3MB). Peak memory consumption was 51.6MB. Max. memory is 16.1GB. [2022-07-12 12:37:57,471 INFO L158 Benchmark]: TraceAbstraction took 32005.67ms. Allocated memory was 140.5MB in the beginning and 188.7MB in the end (delta: 48.2MB). Free memory was 38.7MB in the beginning and 70.8MB in the end (delta: -32.2MB). Peak memory consumption was 47.4MB. Max. memory is 16.1GB. [2022-07-12 12:37:57,471 INFO L158 Benchmark]: Witness Printer took 3.36ms. Allocated memory is still 188.7MB. Free memory was 70.8MB in the beginning and 69.9MB in the end (delta: 901.1kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 12:37:57,473 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 56.6MB. Free memory was 38.3MB in the beginning and 38.3MB in the end (delta: 52.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1481.63ms. Allocated memory was 56.6MB in the beginning and 100.7MB in the end (delta: 44.0MB). Free memory was 26.8MB in the beginning and 50.3MB in the end (delta: -23.4MB). Peak memory consumption was 47.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 131.00ms. Allocated memory is still 100.7MB. Free memory was 50.3MB in the beginning and 43.6MB in the end (delta: 6.7MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 109.32ms. Allocated memory is still 100.7MB. Free memory was 43.6MB in the beginning and 36.5MB in the end (delta: 7.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * RCFGBuilder took 10428.83ms. Allocated memory was 100.7MB in the beginning and 140.5MB in the end (delta: 39.8MB). Free memory was 36.5MB in the beginning and 39.7MB in the end (delta: -3.3MB). Peak memory consumption was 51.6MB. Max. memory is 16.1GB. * TraceAbstraction took 32005.67ms. Allocated memory was 140.5MB in the beginning and 188.7MB in the end (delta: 48.2MB). Free memory was 38.7MB in the beginning and 70.8MB in the end (delta: -32.2MB). Peak memory consumption was 47.4MB. Max. memory is 16.1GB. * Witness Printer took 3.36ms. Allocated memory is still 188.7MB. Free memory was 70.8MB in the beginning and 69.9MB in the end (delta: 901.1kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_src#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_dest#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.C_memcpy_#res#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 5639]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 5861. Possible FailurePath: [L5662] int LDV_IN_INTERRUPT = 1; [L5663] int ldv_state_variable_2 ; [L5664] struct usbnet *genelink_info_group0 ; [L5665] int ref_cnt ; [L5666] int ldv_state_variable_1 ; [L5667] int usb_counter ; [L5668] struct usb_interface *gl620a_driver_group1 ; [L5669] int ldv_state_variable_0 ; [L5670] struct sk_buff *genelink_info_group1 ; [L5860-L5862] static struct driver_info const genelink_info = {(char *)"Genesys GeneLink", 4114, & genelink_bind, 0, 0, 0, 0, 0, 0, 0, & genelink_rx_fixup, & genelink_tx_fixup, 0, 0, 1, 2, 0UL}; [L5863-L5865] static struct usb_device_id const products[2U] = { {3U, 1507U, 1282U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned long )(& genelink_info)}}; [L5866] struct usb_device_id const __mod_usb__products_device_table ; [L5867-L5876] static struct usb_driver gl620a_driver = {"gl620a", & usbnet_probe, & usbnet_disconnect, 0, & usbnet_suspend, & usbnet_resume, 0, 0, 0, (struct usb_device_id const *)(& products), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, (unsigned char)0, 1U, (unsigned char)0}; [L5893] int ldv_retval_2 ; [L5894] int ldv_retval_5 ; [L5895] int ldv_retval_0 ; [L5896] int ldv_retval_4 ; [L5899] int ldv_retval_1 ; [L5901] int ldv_retval_3 ; [L6187] Element set_impl[15] ; [L6188] int last_index = 0; [L6322] Set LDV_SKBS ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5925] struct usb_device_id *ldvarg1 ; [L5926] void *tmp ; [L5927] pm_message_t ldvarg0 ; [L5928] struct usb_interface *ldvarg3 ; [L5929] void *tmp___0 ; [L5930] gfp_t ldvarg2 ; [L5931] int tmp___1 ; [L5932] int tmp___2 ; [L5933] int tmp___3 ; [L5934] int tmp___4 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg2={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] CALL, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=32, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=32, tmp___0=2147483648, usb_counter=0] [L5936] RET, EXPR ldv_zalloc(32UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(32UL)={0:0}, ldvarg0={1099511627714:0}, ldvarg2={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5936] tmp = ldv_zalloc(32UL) [L5937] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=2147483648, usb_counter=0] [L5938] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5938] tmp___0 = ldv_zalloc(1560UL) [L5939] ldvarg3 = (struct usb_interface *)tmp___0 [L5940] CALL ldv_initialize() [L6341] CALL ldv_set_init(LDV_SKBS) [L6193] set = set_impl [L6194] last_index = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set={24:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6341] RET ldv_set_init(LDV_SKBS) [L5940] RET ldv_initialize() [L5941] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={1099511627714:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5942] FCALL memset((void *)(& ldvarg2), 0, 4UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, memset((void *)(& ldvarg2), 0, 4UL)={136:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5943] ldv_state_variable_1 = 0 [L5944] ref_cnt = 0 [L5945] ldv_state_variable_0 = 1 [L5946] ldv_state_variable_2 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: [L6028] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L6029] COND TRUE ldv_state_variable_0 == 1 [L6030] CALL, EXPR gl620a_driver_init() [L5879] int tmp ; [L5881] CALL, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L6167] ldv_func_ret_type ldv_func_res ; [L6168] int tmp ; [L6170] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6436] return __VERIFIER_nondet_int(); [L6170] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6170] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L6171] ldv_func_res = tmp [L6172] ldv_state_variable_1 = 1 [L6173] usb_counter = 0 [L6174] CALL ldv_usb_driver_1() [L5916] void *tmp ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] CALL, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1560, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1560, tmp___0=2147483648, usb_counter=0] [L5918] RET, EXPR ldv_zalloc(1560UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, ldv_zalloc(1560UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5918] tmp = ldv_zalloc(1560UL) [L5919] gl620a_driver_group1 = (struct usb_interface *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L6174] RET ldv_usb_driver_1() [L6175] return (ldv_func_res); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, ldv_func_arg1={23:0}, ldv_func_arg1={23:0}, ldv_func_arg2={25:27}, ldv_func_arg2={25:27}, ldv_func_arg3={20:0}, ldv_func_arg3={20:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L5881] RET, EXPR ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5881] tmp = ldv_usb_register_driver_13(& gl620a_driver, & __this_module, "gl620a") [L5882] return (tmp); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=0, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp=0, usb_counter=0] [L6030] RET, EXPR gl620a_driver_init() [L6030] ldv_retval_4 = gl620a_driver_init() [L6031] COND TRUE ldv_retval_4 == 0 [L6032] ldv_state_variable_0 = 3 [L6033] ldv_state_variable_2 = 1 [L6034] CALL ldv_initialize_driver_info_2() [L5904] void *tmp ; [L5905] void *tmp___0 ; VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] CALL, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=1472, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1472, tmp___0=2147483648, usb_counter=0] [L5907] RET, EXPR ldv_zalloc(1472UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(1472UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5907] tmp = ldv_zalloc(1472UL) [L5908] genelink_info_group0 = (struct usbnet *)tmp VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] CALL, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND TRUE tmp___0 != 0 [L5610] return ((void *)0); VAL [\old(size)=232, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=232, tmp___0=2147483712, usb_counter=0] [L5909] RET, EXPR ldv_zalloc(232UL) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(232UL)={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, usb_counter=0] [L5909] tmp___0 = ldv_zalloc(232UL) [L5910] genelink_info_group1 = (struct sk_buff *)tmp___0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, usb_counter=0] [L6034] RET ldv_initialize_driver_info_2() [L6037] COND FALSE !(ldv_retval_4 != 0) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: [L6052] case 2: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, usb_counter=0] [L6053] COND TRUE ldv_state_variable_2 != 0 [L6054] tmp___4 = __VERIFIER_nondet_int() [L6056] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6057] COND TRUE ldv_state_variable_2 == 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6058] CALL genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5700] struct gl_header *header ; [L5701] struct gl_packet *packet ; [L5702] struct sk_buff *gl_skb ; [L5703] u32 size ; [L5704] u32 count ; [L5705] struct _ddebug descriptor ; [L5706] long tmp ; [L5707] struct _ddebug descriptor___0 ; [L5708] long tmp___0 ; [L5709] size_t __len ; [L5710] void *__ret ; [L5711] unsigned char *tmp___2 ; [L5712] struct _ddebug descriptor___1 ; [L5713] long tmp___3 ; [L5715] EXPR skb->len [L5715] EXPR dev->net [L5715] EXPR (dev->net)->hard_header_len VAL [(dev->net)->hard_header_len=0, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, dev->net={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb->len=0, usb_counter=0] [L5715] COND FALSE !(skb->len < (unsigned int )(dev->net)->hard_header_len) [L5719] EXPR skb->data [L5719] header = (struct gl_header *)skb->data [L5720] EXPR header->packet_count [L5720] count = header->packet_count [L5721] COND FALSE !(count > 32U) [L5737] packet = & header->packets VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5738] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=2147483648, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5738] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, usb_counter=0] [L5771] COND TRUE count > 1U VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, header={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={0:0}, skb={0:0}, usb_counter=0] [L5741] EXPR packet->packet_length [L5741] size = packet->packet_length [L5742] COND FALSE !(size > 1514U) [L5758] CALL, EXPR ldv_alloc_skb_12(size, 32U) [L6153] struct sk_buff *tmp ; VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] CALL, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6325] void *skb ; [L6326] void *tmp___7 ; VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] CALL, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5604] void *p ; [L5605] void *tmp ; [L5606] int tmp___0 ; [L5608] tmp___0 = __VERIFIER_nondet_int() [L5609] COND FALSE !(tmp___0 != 0) [L5612] EXPR, FCALL calloc(1UL, size) [L5612] tmp = calloc(1UL, size) [L5613] p = tmp VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, calloc(1UL, size)={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={26:0}, tmp___0=0, usb_counter=0] [L5614] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5583] COND FALSE !(!cond) VAL [\old(cond)=1, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, cond=1, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5614] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(last_index)=0, \old(size)=248, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, calloc(1UL, size)={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={26:0}, tmp___0=0, usb_counter=0] [L5615] return (p); VAL [\old(last_index)=0, \old(size)=248, \result={26:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, calloc(1UL, size)={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, p={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=248, tmp={26:0}, tmp___0=0, usb_counter=0] [L6328] RET, EXPR ldv_zalloc(sizeof(struct sk_buff___0 )) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_zalloc(sizeof(struct sk_buff___0 ))={26:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6328] tmp___7 = ldv_zalloc(sizeof(struct sk_buff___0 )) [L6329] skb = (struct sk_buff___0 *)tmp___7 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={26:0}, tmp___7={26:0}, usb_counter=0] [L6330] COND FALSE !(! skb) [L6333] CALL ldv_set_add(LDV_SKBS, skb) [L6201] int i ; [L6203] i = 0 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, e={26:0}, e={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6204] COND TRUE 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, e={26:0}, e={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6205] COND FALSE !(i < last_index) VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, e={26:0}, e={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6215] COND TRUE last_index < 15 [L6216] set_impl[last_index] = e [L6217] last_index = last_index + 1 VAL [\old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, e={26:0}, e={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, i=0, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6333] RET ldv_set_add(LDV_SKBS, skb) [L6334] return (skb); VAL [\old(last_index)=0, \result={26:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, skb={26:0}, tmp___7={26:0}, usb_counter=0] [L6155] RET, EXPR ldv_skb_alloc() VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_skb_alloc()={26:0}, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, usb_counter=0] [L6155] tmp = ldv_skb_alloc() [L6156] COND TRUE \read(*tmp) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={26:0}, usb_counter=0] [L6158] CALL, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp___0=2147483648, usb_counter=0] [L6158] RET, EXPR ldv_malloc(size) VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(size)={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={26:0}, usb_counter=0] [L6158] tmp->head = ldv_malloc(size) [L6159] EXPR tmp->head [L6159] tmp->data = tmp->head [L6161] return (tmp); VAL [\old(last_index)=0, \old(priority)=32, \old(size)=0, \result={26:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, priority=32, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, tmp={26:0}, usb_counter=0] [L5758] RET, EXPR ldv_alloc_skb_12(size, 32U) [L5758] gl_skb = ldv_alloc_skb_12(size, 32U) [L5759] COND TRUE (unsigned long )gl_skb != (unsigned long )((struct sk_buff *)0) [L5760] __len = (size_t )size VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, usb_counter=0] [L5761] CALL, EXPR skb_put(gl_skb, size) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={26:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6427] EXPR arg0->data [L6427] EXPR arg0->tail [L6427] unsigned char *ret_val = arg0->data + arg0->tail; [L6428] EXPR arg0->tail [L6428] arg0->tail += arg1 [L6429] return ret_val; VAL [\old(arg1)=null, \old(last_index)=0, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={26:0}, arg0={26:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, ret_val={0:0}, set_impl={24:0}, usb_counter=0] [L5761] RET, EXPR skb_put(gl_skb, size) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, count=2, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:4}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_put(gl_skb, size)={0:0}, usb_counter=0] [L5761] tmp___2 = skb_put(gl_skb, size) [L5762-L5763] EXPR, FCALL memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5762-L5763] __ret = memcpy((void *)tmp___2, (void const *)(& packet->packet_data), __len) [L5764] FCALL usbnet_skb_return(dev, gl_skb) [L5767] packet = (struct gl_packet *)(& packet->packet_data) + (unsigned long )size [L5768] count = count - 1U VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5769] CALL skb_pull(skb, size + 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=2147483648, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5769] RET skb_pull(skb, size + 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, size + 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5771] COND FALSE !(count > 1U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L5775] CALL skb_pull(skb, 4U) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] CALL, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(last_index)=0, \old(size)=1, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5587] void *p ; [L5588] void *tmp ; [L5589] int tmp___0 ; [L5591] tmp___0 = __VERIFIER_nondet_int() [L5592] COND TRUE tmp___0 != 0 [L5593] return ((void *)0); VAL [\old(last_index)=0, \old(size)=1, \result={0:0}, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, size=1, tmp___0=2147483648, usb_counter=0] [L6421] RET, EXPR ldv_malloc(sizeof(unsigned char)) VAL [\old(arg1)=null, \old(last_index)=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg0={0:0}, arg0={0:0}, arg1=null, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(unsigned char))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L6421] return ldv_malloc(sizeof(unsigned char)); [L5775] RET skb_pull(skb, 4U) VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb_pull(skb, 4U)={0:0}, tmp___2={0:0}, usb_counter=0] [L5776] EXPR skb->len VAL [\old(last_index)=0, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, descriptor={40:0}, descriptor___0={65:0}, descriptor___1={72:0}, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, skb->len=0, tmp___2={0:0}, usb_counter=0] [L5776] COND FALSE !(skb->len > 1514U) [L5792] return (1); [L5792] return (1); [L5792] return (1); [L5792] return (1); VAL [\old(last_index)=0, \result=1, __len=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __ret={0:0}, __this_module={25:27}, count=1, dev={0:0}, dev={0:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, gl_skb={26:0}, header={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, packet={0:8}, products={22:0}, ref_cnt=0, set_impl={24:0}, size=0, skb={0:0}, skb={0:0}, tmp___2={0:0}, usb_counter=0] [L6058] RET genelink_rx_fixup(genelink_info_group0, genelink_info_group1) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, genelink_rx_fixup(genelink_info_group0, genelink_info_group1)=1, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6059] ldv_state_variable_2 = 1 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L6062] COND FALSE !(ldv_state_variable_2 == 2) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=2, tmp___3=1, tmp___4=0, usb_counter=0] [L5948] tmp___1 = __VERIFIER_nondet_int() [L5950] case 0: [L6016] case 1: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=1, tmp___4=0, usb_counter=0] [L6017] COND TRUE ldv_state_variable_0 != 0 [L6018] tmp___3 = __VERIFIER_nondet_int() [L6020] case 0: VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6021] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L6022] CALL gl620a_driver_exit() [L5888] CALL ldv_usb_deregister_14(& gl620a_driver) [L6181] FCALL usb_deregister(arg) [L6182] ldv_state_variable_1 = 0 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, arg={23:0}, arg={23:0}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5888] RET ldv_usb_deregister_14(& gl620a_driver) [L6022] RET gl620a_driver_exit() [L6023] ldv_state_variable_0 = 2 VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, ldvarg0={1099511627714:0}, ldvarg1={0:0}, ldvarg2={136:0}, ldvarg3={0:0}, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp={0:0}, tmp___0={0:0}, tmp___1=1, tmp___3=0, tmp___4=0, usb_counter=0] [L6112] CALL ldv_check_final_state() [L6392] int tmp___7 ; [L6394] CALL, EXPR ldv_set_is_empty(LDV_SKBS) [L6283] return (last_index == 0); VAL [\result=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set={0:0}, set={0:0}, set_impl={24:0}, usb_counter=0] [L6394] RET, EXPR ldv_set_is_empty(LDV_SKBS) [L6394] tmp___7 = ldv_set_is_empty(LDV_SKBS) [L6395] COND FALSE !(\read(tmp___7)) VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, tmp___7=0, usb_counter=0] [L6397] CALL ldv_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] [L5639] reach_error() VAL [__mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __mod_usb__products_device_table=0, __this_module={25:27}, genelink_info={21:0}, genelink_info_group0={0:0}, genelink_info_group1={0:0}, gl620a_driver={23:0}, gl620a_driver_group1={0:0}, last_index=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, LDV_SKBS={0:0}, ldv_state_variable_0=2, ldv_state_variable_1=0, ldv_state_variable_2=1, products={22:0}, ref_cnt=0, set_impl={24:0}, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 240 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 31.7s, OverallIterations: 10, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 10.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 2 mSolverCounterUnknown, 1076 SdHoareTripleChecker+Valid, 8.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1063 mSDsluCounter, 14983 SdHoareTripleChecker+Invalid, 7.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 11820 mSDsCounter, 46 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 504 IncrementalHoareTripleChecker+Invalid, 552 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 46 mSolverCounterUnsat, 3163 mSDtfsCounter, 504 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1026 GetRequests, 975 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 3.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1846occurred in iteration=9, InterpolantAutomatonStates: 57, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 9 MinimizatonAttempts, 740 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.6s SsaConstructionTime, 7.5s SatisfiabilityAnalysisTime, 4.1s InterpolantComputationTime, 1152 NumberOfCodeBlocks, 1132 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 1008 ConstructedInterpolants, 0 QuantifiedInterpolants, 1367 SizeOfPredicates, 22 NumberOfNonLiveVariables, 7157 ConjunctsInSsa, 59 ConjunctsInUnsatCore, 10 InterpolantComputations, 8 PerfectInterpolantSequences, 841/849 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-12 12:37:57,572 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample